Skip to content
OpenAdvisories

Package · crates.io

block_buffer

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    GHSA-qwgh-2vcv-g2f7

    block_buffer: panic corrupts inline buffer position

    ### Summary A caught panic may leave the cursor position of `EagerBuffer` or `ReadBuffer` in a corrupted state; this in turn allows out-of-bounds reads/writes. ### Details & PoC The following two tests fail miri: ```rust #[cfg(miri)] #[test] fn eager_digest_b…

    block_buffer crates.io