Skip to content
OpenAdvisories
Unscored RUSTSEC-2025-0028

cve-rs introduces memory vulnerabilities in safe Rust

Published Feb 10, 2025 · Updated May 6, 2025 · Assigned by RUSTSEC

Description

This crate is a joke and should never be used.

`cve-rs` provides demonstrations of common memory vulnerabilities (such as buffer overflows and segfaults) implemented completely within safe Rust.

Internally, this crate does not use unsafe code, it instead exploits a soundness bug in rustc: https://github.com/rust-lang/rust/issues/25860

Affected packages

EcosystemPackageAffectedFixedRecord
crates.io cve-rs >= 0.0.0-0 — RUSTSEC-2025-0028

References