VDB
Sign up
HIGH

GHSA-qgrp-8f3v-q85p

`FixedSizeBinaryArray` does not perform bound checks on accessing values and offsets

Details

`FixedSizeBinaryArray` performs insufficient bounds checks, which allows out-of-bounds reads in safe code.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/arrow
Introduced in: 0Fixed in: 6.4.0

Upgrade arrow to 6.4.0 or newer (ecosystem crates.io).

References