CRITICAL9.8

GHSA-h45v-vgvp-3h5v

Out-of-bounds write in stack

Details

ArrayVec::insert allows insertion of an element into the array object into the specified index. Due to a missing check on the upperbound of this index, it is possible to write out of bounds.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/stack

Introduced in: 0Fixed in: 0.3.1

Upgrade stack to 0.3.1 or newer (ecosystem crates.io).

References

https://nvd.nist.gov/vuln/detail/CVE-2020-35895[ADVISORY]
https://github.com/arcnmx/stack-rs/issues/4[WEB]
https://github.com/arcnmx/stack-rs/commit/369e55736f9bd29c37b1712afc2923f4028148c6[WEB]
https://github.com/arcnmx/stack-rs[PACKAGE]
https://rustsec.org/advisories/RUSTSEC-2020-0042.html[WEB]