HIGH7.5

GHSA-64gv-qg2v-vxv6

Array size is not checked in sized-chunks

Details

An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is not checked when constructed with From<InlineArray<A, T>>.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/sized-chunks

Introduced in: 0Fixed in: 0.6.3

Upgrade sized-chunks to 0.6.3 or newer (ecosystem crates.io).

References

https://nvd.nist.gov/vuln/detail/CVE-2020-25793[ADVISORY]
https://github.com/bodil/sized-chunks/issues/11[WEB]
https://github.com/bodil/sized-chunks[PACKAGE]
https://rustsec.org/advisories/RUSTSEC-2020-0041.html[WEB]