Skip to content
OpenAdvisories
High GHSA-pfp7-vxgr-83pw RUSTSEC-2025-0062

toodee is vulnerable to Heap Buffer Overflow through its DrainCol Destructor

Published Sep 9, 2025 · Updated Oct 28, 2025 · Assigned by GHSA

Description

An off-by-one error in the `DrainCol::drop` destructor could cause an unsafe memory copy operation to exceed the bounds of the associated vector.

The error was related to the size of the data being copied in one of the `ptr::copy` invocations inside the destructor.

When removing the first column from a TooDee object, the DrainCol return object could cause a heap buffer overflow vulnerability when it is dropped.

The issue was fixed in commit `e6e16d5` by reducing the copied size by one.

Affected packages

EcosystemPackageAffectedFixedRecord
crates.io toodee >= 0.2.0, < 0.6.0 0.6.0 GHSA-pfp7-vxgr-83pw

References