VDB
Sign up
HIGH7.5

GHSA-3358-4f7f-p4j4

Use after free in generic-array

Details

An issue was discovered in the generic-array crate before 0.13.3 for Rust. It violates soundness by using the arr! macro to extend lifetimes.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/generic-array
Introduced in: 0.13.0Fixed in: 0.13.3

Upgrade generic-array to 0.13.3 or newer (ecosystem crates.io).

crates.io/generic-array
Introduced in: 0.12.0Fixed in: 0.12.4

Upgrade generic-array to 0.12.4 or newer (ecosystem crates.io).

crates.io/generic-array
Introduced in: 0.11.0Fixed in: 0.11.2

Upgrade generic-array to 0.11.2 or newer (ecosystem crates.io).

crates.io/generic-array
Introduced in: 0.10.0Fixed in: 0.10.1

Upgrade generic-array to 0.10.1 or newer (ecosystem crates.io).

crates.io/generic-array
Introduced in: 0.8.0Fixed in: 0.9.1

Upgrade generic-array to 0.9.1 or newer (ecosystem crates.io).

References