scanner-rs OOB read (#2262)

This commit is contained in:
Shihao Xia
2025-05-07 04:17:05 -04:00
committed by GitHub
parent 6c750492d5
commit 2be585eca3

View File

@@ -0,0 +1,22 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "scanner"
date = "2025-03-27"
informational = "unsound"
categories = ["memory-corruption"]
keywords = ["out-of-bounds read"]
url = "https://github.com/pombredanne/scanner-rs/pull/1"
[affected.functions]
"scanner::Match::get" = ["<= 0.1.0"]
"scanner::Match::ptr" = ["<= 0.1.0"]
[versions]
patched = []
unaffected = []
```
# Public API without sufficient bounds checking
`Match::get()` and `Match::ptr()` lack sufficient bounds checks, leading to potential out of bounds reads.