Skip to content
OpenAdvisories
High · 7.5 CVE-2021-45708 EUVD-2022-0474GHSA-5vwc-r48g-wj6cGHSA-hfxp-p695-629xRUSTSEC-2021-0120

Abomonation transmutes &T to and from &[u8] without sufficient constraints

Published Dec 26, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

An issue was discovered in the abomonation crate through 2021-10-17 for Rust. Because transmute operations are insufficiently constrained, there can be an information leak or ASLR bypass.

Affected packages

EcosystemPackageAffectedFixedRecord
crates.io abomonation <= 0.7.3 — GHSA-5vwc-r48g-wj6c
crates.io abomonation >= 0.0.0-0 — RUSTSEC-2021-0120

References