—
RUSTSEC-2025-0062
Heap Buffer Overflow in the DrainCol Destructor
Details
An off-by-one error in the `DrainCol::drop` destructor could cause an unsafe memory copy operation to exceed the bounds of the associated vector.
The error was related to the size of the data being copied in one of the `ptr::copy` invocations inside the destructor.
When removing the first column from a TooDee object, the DrainCol return object could cause a heap buffer overflow vulnerability when it is dropped.
The issue was fixed in commit `e6e16d5` by reducing the copied size by one.
Are you affected?
Enter the version of the package you're using.
Affected packages
crates.io/toodee
Introduced in:
0.2.0Fixed in: 0.6.0Upgrade toodee to 0.6.0 or newer (ecosystem crates.io).