https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 12:57:41 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-238682 EUVD-2026-238682 https://cve.radiocsirt.org/vuln/euvd-2026-238682 https://cve.radiocsirt.org/vuln/fkie_cve-2025-47737 <p>lib.rs in the trailer crate through 0.1.2 for Rust mishandles allocating with a size of zero.</p> <p>lib.rs in the trailer crate through 0.1.2 for Rust mishandles allocating with a size of zero.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-47737 https://cve.radiocsirt.org/vuln/ghsa-6x45-r4pr-5362 <p><strong>Affected:</strong> crates.io: trailer</p> <p>lib.rs in the trailer crate through 0.1.2 for Rust mishandles allocating with a size of zero.</p> <p><strong>Affected:</strong> crates.io: trailer</p> <p>lib.rs in the trailer crate through 0.1.2 for Rust mishandles allocating with a size of zero.</p> https://cve.radiocsirt.org/vuln/ghsa-6x45-r4pr-5362 https://cve.radiocsirt.org/vuln/rustsec-2025-0163 <p><strong>Affected:</strong> crates.io: trailer</p> <p>Our static analyzer find a potential unsound issue in the construction of Trailer, where it doesn&#39;t provide enough check to ensure the soundness.</p> <p>trailer/src/lib.rs, Lines 18 to 25 in d474984: ``` pub fn new(capacity: usize) -&gt; Trailer&lt;T&gt; { unsafe { let trailer = Trailer::allocate(capacity); let ptr = trailer.ptr as *mut T; ptr.write(T::default()); trailer } } ```</p> <p>The constructor does not check the T is not a ZST in rust, and allocating with size 0 is considered as undefined behaviors in Rust. A poc code like below can work:</p> <p>``` use trailer::Trailer; #[derive(Default)] struct Zst;</p> <p>fn main() { let mut a = Trailer::&lt;Zst&gt;::new(0); drop(a); } ```</p> <p>The trailer crate is unmaintained and this security issue will not be fixed.</p> <p><strong>Affected:</strong> crates.io: trailer</p> <p>Our static analyzer find a potential unsound issue in the construction of Trailer, where it doesn&#39;t provide enough check to ensure the soundness.</p> <p>trailer/src/lib.rs, Lines 18 to 25 in d474984: ``` pub fn new(capacity: usize) -&gt; Trailer&lt;T&gt; { unsafe { let trailer = Trailer::allocate(capacity); let ptr = trailer.ptr as *mut T; ptr.write(T::default()); trailer } } ```</p> <p>The constructor does not check the T is not a ZST in rust, and allocating with size 0 is considered as undefined behaviors in Rust. A poc code like below can work:</p> <p>``` use trailer::Trailer; #[derive(Default)] struct Zst;</p> <p>fn main() { let mut a = Trailer::&lt;Zst&gt;::new(0); drop(a); } ```</p> <p>The trailer crate is unmaintained and this security issue will not be fixed.</p> https://cve.radiocsirt.org/vuln/rustsec-2025-0163