arcnmx/stack-rs · Security
Out-of-bounds write in stack
- GHSA ID
- GHSA-h45v-vgvp-3h5v
- CVE ID
- CVE-2020-35895
- Severity
- critical
- Published
- Updated
- CVSS
- 9.8 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS v3
- 9.8 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
ArrayVec::insert allows insertion of an element into the array object into the specified index. Due to a missing check on the upperbound of this index, it is possible to write out of bounds.
CWEs
- CWE-787 · Out-of-bounds Write