Skip to content
OpenAdvisories

Package · crates.io

xmas-elf

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium —

    xmas-elf potential out-of-bounds read with a malformed ELF file and the HashTable API.

    Affected versions of this crate only validated the `index` argument of `HashTable::get_bucket` and `HashTable::get_chain` against the input-controlled `bucket_count` and `chain_count` fields, but not against the size of the ELF section. As a result, a malform…