Reported

May 6, 2025

Issued

August 31, 2026

Package

mod3d-base (crates.io)

Type

INFO Unsound

Categories

• memory-corruption

References

• https://github.com/atthecodeface/model3d

Patched

• >=0.3.0

Affected Functions

Version

mod3d_base::BufferData::as_ptr

• <=0.2.0

Description

mod3d_base::BufferData::as_ptr lack of sufficient checks to its public self field byte_offset and used unsafely to do the pointer calculation.

Advisory available under CC0-1.0 license.