VDB
Sign up
HIGH

GHSA-r7cj-wmwv-hfw5

`BinaryArray` does not perform bound checks on reading values and offsets

Details

`BinaryArray` performs insufficient validation on creation, which allows out-of-bounds reads in safe code.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/arrow
Introduced in: 0Fixed in: 6.4.0

Upgrade arrow to 6.4.0 or newer (ecosystem crates.io).

References