CVE-2019-12083

The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust's safety guarantees and…

published May 13, 2019

CVSS
—
EPSS
2%
Percentile
82.5
In the wild
Unconfirmed
What it is

The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust's safety guarantees and cause memory unsafety. If the `Error::type_id` method is overridden then any type can be safely cast to any other type, causing memory safety vulnerabilities in safe code (e.g., out-of-bounds write or read). Code that does not manually implement Error::type_id is unaffected.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02216 · 82.5th percentile
Published
2019-05-13T19:06Z
EPSS history
Timeline
  • 13 MAY 19:06Z
    The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust's safety guarantees and…
    cvelistv5