Most recent entries from all

EUVD-2026-47872

fkie_cve-2020-35888

An issue was discovered in the arr crate through 2020-08-25 for Rust. Uninitialized memory is dropped by Array::new_from_template.

GHSA-36xw-hgfv-jwm7 — Multiple security issues including data race, buffer overflow, and uninitialized memory drop in arr

Affected: crates.io: arr

arr crate contains multiple security issues. Specifically,

1. It incorrectly implements Sync/Send bounds, which allows to smuggle non-Sync/Send types across the thread boundary. 2. Index and IndexMut implementation does not check the array bound. 3. Array::new_from_template() drops uninitialized memory.

gsd-2020-35888

RUSTSEC-2020-0034 — Multiple security issues including data race, buffer overflow, and uninitialized memory drop

Affected: crates.io: arr

`arr` crate contains multiple security issues. Specifically,

1. It incorrectly implements Sync/Send bounds, which allows to smuggle non-Sync/Send types across the thread boundary. 2. `Index` and `IndexMut` implementation does not check the array bound. 3. `Array::new_from_template()` drops uninitialized memory.