CVE-2020-25792
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.5epss 2.8%
exploitation probability
2.8%top 15% of all CVEs
observed exploitation
nono source reports it
In short
The sized-chunks library for Rust doesn't validate array sizes when using the pair() function, allowing an attacker to cause unexpected behavior or crashes by creating improperly sized data structures.
Technical detail
CWE-129 (Improper Validation of Array Index) in the Chunk implementation of sized-chunks allows an unchecked array size during pair() construction. An attacker can supply malformed input to trigger out-of-bounds access or memory unsafety, potentially leading to denial of service or information disclosure.
Summary generated and translated by AI from the official description.
An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is not checked when constructed with pair().
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
n/a · n/a