mozilla/grcov · Security
grcov has an out of bounds write triggered by crafted coverage data
- GHSA ID
- GHSA-qm2p-4w45-v2vr
- Severity
- medium
- Published
- Updated
Description
Function grcov::covdir::get_coverage uses the unsafe function get_unchecked_mut without validating that the index is in bounds.
This results in memory corruption, and could potentially allow arbitrary code execution provided that an attacker can feed the tool crafted coverage data.
CWEs
- CWE-787 · Out-of-bounds Write