What is GHSA-x76r-966h-5qv9?

GHSA-x76r-966h-5qv9 is a security advisory published by GitHub Security Advisories with High severity. Out-of-bounds Write in vec-const

Which CVE IDs does GHSA-x76r-966h-5qv9 cover?

GHSA-x76r-966h-5qv9 covers the following CVE IDs: CVE-2021-45680. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-x76r-966h-5qv9?

GHSA-x76r-966h-5qv9 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-x76r-966h-5qv9?

GHSA-x76r-966h-5qv9 affects 1 product, including: rust/vec-const:\u003c 2.0.0.

GHSA-x76r-966h-5qv9HighCVSS 7.5

Out-of-bounds Write in vec-const

Vendor

GitHub Security Advisories

Published

January 6, 2022

Last Modified

June 13, 2023

🔗 CVE IDs covered (1)

CVE-2021-45680 →

📋 Description

An issue was discovered in the vec-const crate before 2.0.0 for Rust. It tries to construct a Vec from a pointer to a const slice, leading to memory corruption.

🎯 Affected products1

rust/vec-const:< 2.0.0

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2021-45680
https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/vec-const/RUSTSEC-2021-0082.md
https://rustsec.org/advisories/RUSTSEC-2021-0082.html
https://github.com/Eolu/vec-const/issues/1#issuecomment-898908241
https://github.com/advisories/GHSA-x76r-966h-5qv9