bodil/sized-chunks · Security
Missing release of memory in sized-chunks
- GHSA ID
- GHSA-x54v-qxxr-93qc
- CVE ID
- CVE-2020-25795
- Severity
- high
- Published
- Updated
- CVSS
- 7.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS v3
- 7.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
Chunk:
- Array size is not checked when constructed with unit() and pair().
- Array size is not checked when constructed with From<InlineArray<A, T>>.
- Clone and insert_from are not panic-safe; A panicking iterator causes memory safety issues with them.
InlineArray:
- Generates unaligned references for types with a large alignment requirement.
CWEs
- CWE-401 · Missing Release of Memory after Effective Lifetime