GHSA-c7fw-cr3w-wvfcMediumCVSS 4.7
Multiple security issues including data race, buffer overflow, and uninitialized memory drop in arr
🔗 CVE IDs covered (1)
📋 Description
arr crate contains multiple security issues. Specifically,
- It incorrectly implements Sync/Send bounds, which allows to smuggle non-Sync/Send types across the thread boundary.
- Index and IndexMut implementation does not check the array bound.
- Array::new_from_template() drops uninitialized memory.
🎯 Affected products1
- rust/arr:<= 0.6.1