Enum repr causing potential memory corruption
The attribute repr() added to enums to be compatible with C-FFI caused memory corruption on MSVC toolchain. arrayfire crates <= version 3.5.0 do not have this issue when used with Rust versions 1.27 or earlier. The issue only started to appear since Rust version 1.28. The issue seems to be interlinked with which version of Rust is being used. The issue was fixed in crate 3.6.0.
RUSTSEC-2018-0011
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:RUSTSEC-2018-0011
arrayfire
Source reference: /affected/0/package/name
- Affected versions
- Not stated in this record
- Fixed versions
- 3.6.0
Source reference:
/affected/0/ranges - Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"type": "SEMVER",
"events": [
{
"introduced": "0.0.0-0"
},
{
"fixed": "3.6.0"
}
]
}
],
"package": {
"name": "arrayfire",
"purl": "pkg:cargo/arrayfire",
"ecosystem": "crates.io"
},
"database_specific": {
"cvss": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"source": "https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2018-0011.json",
"categories": [
"memory-corruption"
],
"informational": null
},
"ecosystem_specific": {
"affects": {
"os": [
"windows"
],
"arch": [
"x86_64"
],
"functions": []
},
"affected_functions": null
}
}
]- Related CVEs
- CVE-2018-20998
Source reference:
/aliases
Publisher severity
No explicit severity was provided.
- Event
- #15303 · Revision 1
- Added to Heist Feed
- Publisher date