crates.io package
arr
pkg:cargo/arr
Vulnerabilities (3)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2020-35888 | Cri | 9.8 | <= 0.6.1 | — | Dec 31, 2020 | An issue was discovered in the arr crate through 2020-08-25 for Rust. Uninitialized memory is dropped by Array::new_from_template. | |
| CVE-2020-35887 | Cri | 9.8 | <= 0.6.1 | — | Dec 31, 2020 | An issue was discovered in the arr crate through 2020-08-25 for Rust. There is a buffer overflow in Index and IndexMut. | |
| CVE-2020-35886 | Med | 4.7 | <= 0.6.1 | — | Dec 31, 2020 | An issue was discovered in the arr crate through 2020-08-25 for Rust. An attacker can smuggle non-Sync/Send types across a thread boundary to cause a data race. |
- affected <= 0.6.1
An issue was discovered in the arr crate through 2020-08-25 for Rust. Uninitialized memory is dropped by Array::new_from_template.
- affected <= 0.6.1
An issue was discovered in the arr crate through 2020-08-25 for Rust. There is a buffer overflow in Index and IndexMut.
- affected <= 0.6.1
An issue was discovered in the arr crate through 2020-08-25 for Rust. An attacker can smuggle non-Sync/Send types across a thread boundary to cause a data race.