gz/rust-cpuid · Security
Soundness issue in raw-cpuid
- GHSA ID
- GHSA-hvqc-pc78-x9wh
- CVE ID
- CVE-2021-26306
- Severity
- high
- Published
- Updated
- CVSS
- 7.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS v3
- 7.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
VendorInfo::as_string(), SoCVendorBrand::as_string(), and ExtendedFunctionInfo::processor_brand_string() construct byte slices using std::slice::from_raw_parts(), with data coming from #[repr(Rust)] structs. This is always undefined behavior. This flaw has been fixed in v9.0.0, by making the relevant structs #[repr(C)].
CWEs
- CWE-198 · Use of Incorrect Byte Ordering
- CWE-400 · Uncontrolled Resource Consumption