CVE-2020-25791

HIGH

sized-chunks < 0.6.2 - Improper Validation of Array Index in Chunk Implementation

Title source: llm

Description

An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is not checked when constructed with unit().

References (2)

Core 2

Core References

Third Party Advisory x_refsource_misc

https://rustsec.org/advisories/RUSTSEC-2020-0041.html

Exploit, Patch, Third Party Advisory x_refsource_misc

https://github.com/bodil/sized-chunks/issues/11

Scores

CVSS v3 7.5

EPSS 0.0173

EPSS Percentile 74.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-129

Status published

Products (2)

crates.io/sized-chunks 0 - 0.6.3crates.io

sized-chunks_project/sized-chunks < 0.6.2

Published Sep 19, 2020

Tracked Since Feb 18, 2026