Lucene search

K
osvGoogleOSV:RUSTSEC-2021-0068
HistoryMay 19, 2021 - 12:00 p.m.

Soundness issue in `iced-x86` versions <= 1.10.3

2021-05-1912:00:00
Google
osv.dev
6
soundness
iced-x86
versions
undefined behavior
crates
decoder
flaw
fix
input buffer
github.

EPSS

0.003

Percentile

68.2%

Versions of iced-x86 <= 1.10.3 invoke undefined behavior which may cause soundness
issues in crates using the iced_x86::Decoder struct. The Decoder::new() function
made a call to slice.get_unchecked(slice.length()) to get the end position of
the input buffer. The flaw was fixed with safe logic that does not invoke undefined
behavior.

More details can be found at <https://github.com/icedland/iced/issues/168&gt;.

EPSS

0.003

Percentile

68.2%

Related for OSV:RUSTSEC-2021-0068