tomprogrammer/rust-ascii · Security
Ascii (crate) allows out-of-bounds array indexing in safe code
- GHSA ID
- GHSA-mrrw-grhq-86gf
- Severity
- medium
- Published
- Updated
Description
Affected version of this crate had implementation of From<&mut AsciiStr> for &mut [u8] and &mut str. This can result in out-of-bounds array indexing in safe code.
The flaw was corrected in commit 8a6c779 by removing those impls.
CWEs
- CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer