GHSA-9wgh-vjj7-7433MediumCVSS 5.5
Mutable reference with immutable provenance in image
🔗 CVE IDs covered (1)
📋 Description
A mutable reference to a struct was constructed by dereferencing a pointer obtained from slice::as_ptr. Instead, slice::as_mut_ptr should have been called on the mutable slice argument. The former performs an implicit reborrow as an immutable shared reference which does not allow writing through the derived pointer.
🎯 Affected products1
- rust/image:< 0.23.12
🔗 References (6)
- https://nvd.nist.gov/vuln/detail/CVE-2020-35916
- https://github.com/image-rs/image/issues/1357
- https://rustsec.org/advisories/RUSTSEC-2020-0073.html
- https://github.com/image-rs/image/pull/1358
- https://github.com/image-rs/image/commit/5cbe1e6767d11aff3f14c7ad69a06b04e8d583c7
- https://github.com/advisories/GHSA-9wgh-vjj7-7433