buckyos/cyfs · Security
cyfs-base vulnerable to misaligned pointer dereference in `ChunkId::new`
- GHSA ID
- GHSA-g753-ghr7-q33w
- Severity
- medium
- Published
- Updated
Description
The function ChunkId::new creates a misaligned pointer by casting mutable pointer of u8 slice which has alignment 1 to the mutable pointer of u32 which has alignment 4, and dereference the misaligned pointer leading UB, which should not be allowed in safe function.