What is GHSA-jjx5-3f36-6927?

GHSA-jjx5-3f36-6927 is a security advisory published by GitHub Security Advisories with Critical severity. Incorrect buffer size calculation in iced-x86

Which CVE IDs does GHSA-jjx5-3f36-6927 cover?

GHSA-jjx5-3f36-6927 covers the following CVE IDs: CVE-2021-38188. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-jjx5-3f36-6927?

GHSA-jjx5-3f36-6927 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-jjx5-3f36-6927?

GHSA-jjx5-3f36-6927 affects 1 product, including: rust/iced-x86:\u003c 1.11.0.

GHSA-jjx5-3f36-6927CriticalCVSS 9.8

Incorrect buffer size calculation in iced-x86

Vendor

GitHub Security Advisories

Published

August 25, 2021

Last Modified

February 3, 2023

🔗 CVE IDs covered (1)

CVE-2021-38188 →

📋 Description

An issue was discovered in the iced-x86 crate through 1.10.3 for Rust. In Decoder::new(), slice.get_unchecked(slice.length()) is used unsafely.

🎯 Affected products1

rust/iced-x86:< 1.11.0

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2021-38188
https://github.com/icedland/iced/issues/168
https://github.com/icedland/iced/commit/3c607a003e03b773108401d109167d1840487dce
https://rustsec.org/advisories/RUSTSEC-2021-0068.html
https://github.com/advisories/GHSA-jjx5-3f36-6927