apache/arrow-rs · Security
`DecimalArray` does not perform bound checks on accessing values and offsets
- GHSA ID
- GHSA-h588-76vg-prgj
- Severity
- high
- Published
- Updated
Description
DecimalArray performs insufficient bounds checks, which allows out-of-bounds reads in safe code if the lenght of the backing buffer is not a multiple of 16.