CVE-2020-35895

An issue was discovered in the stack crate before 0.3.1 for Rust

published December 31, 2020

CVSS
โ€”
EPSS
2%
Percentile
79.1
In the wild
Unconfirmed
What it is

โš ๏ธ Watch out for a sneaky out-of-bounds write in the Rust stack crate! A simple element insertion can lead to unexpected data mishaps. ๐Ÿ”ฅ Think of it like trying to stuff an extra slice of pizza into a box that's already at capacity โ€” if you push too hard, you might just break the box and make a mess! If exploited, this flaw could lead to corrupting memory, potentially causing the application to crash or behave unpredictably. While the severity is marked as unknown, it's wise not to underestimate the risks of unexpected data behavior.

Put simply

Think of it like trying to stuff an extra slice of pizza into a box that's already at capacity โ€” if you push too hard, you might just break the box and make a mess! This vulnerability in the stack crate (before version 0.3.1) allows for an out-of-bounds write during element insertion in the ArrayVec structure, which can compromise data integrity.

What to do

If exploited, this flaw could lead to corrupting memory, potentially causing the application to crash or behave unpredictably. While the severity is marked as unknown, it's wise not to underestimate the risks of unexpected data behavior. To remediate this vulnerability, update the stack crate to version 0.3.1 or later. Review your code to ensure all data structures are being used correctly to prevent out-of-bounds issues in the future. You've got this! By updating your dependencies, you can keep your code safe and sound! ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01866 ยท 79.1th percentile
Published
2020-12-31T08:23Z
EPSS history
Timeline
  • 31 DEC 08:23Z
    An issue was discovered in the stack crate before 0.3.1 for Rust
    cvelistv5