Advisory Database
  • Advisories
  • Dependency Scanning
  1. cargo
  2. ›
  3. binary_vec_io
  4. ›
  5. GHSA-wwxp-hxh6-8gf8

GHSA-wwxp-hxh6-8gf8: binary_vec_io access memory out-of-bounds in binary_read_to_ref and binary_write_from_ref

October 22, 2025

Safe functions accept a single &T or &mut T but multiply by n to create slices extending beyond allocated memory when n > 1.

These functions use from_raw_parts to create slices larger than the underlying allocation, violating memory safety.

The binary_vec_io repository is archived and unmaintained.

References

  • gist.github.com/lewismosciski/57ac3b8b7a861abdd0d7ae6f39de5a9d
  • github.com/10XGenomics/rust-toolbox
  • github.com/RustSec/advisory-db/pull/2428
  • github.com/advisories/GHSA-wwxp-hxh6-8gf8
  • rustsec.org/advisories/RUSTSEC-2025-0109.html

Code Behaviors & Features

Detect and mitigate GHSA-wwxp-hxh6-8gf8 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →

Affected versions

All versions up to 0.1.12

Solution

Unfortunately, there is no solution available yet.

Weakness

  • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Source file

cargo/binary_vec_io/GHSA-wwxp-hxh6-8gf8.yml

Spotted a mistake? Edit the file on GitLab.

  • Site Repo
  • About GitLab
  • Terms
  • Privacy Statement
  • Contact

Page generated Sat, 08 Nov 2025 00:20:20 +0000.