Advisory Database
  • Advisories
  • Dependency Scanning
  1. cargo
  2. ›
  3. mimalloc
  4. ›
  5. GHSA-g23h-7vf9-xc25

GHSA-g23h-7vf9-xc25: Mimalloc Can Allocate Memory with Bad Alignment

November 12, 2024 (updated October 31, 2025)

This crate depended on a promise regarding alignments made by the author of the mimalloc allocator to avoid using aligned allocation functions where possible for performance reasons. Since then, the mimalloc allocator’s logic changed, making it break this promise. This caused this crate to return memory with an incorrect alignment for some allocations, particularly those with large alignments. The flaw was fixed by always using the aligned allocation functions.

References

  • github.com/advisories/GHSA-g23h-7vf9-xc25
  • github.com/purpleprotocol/mimalloc_rust
  • github.com/purpleprotocol/mimalloc_rust/issues/87
  • rustsec.org/advisories/RUSTSEC-2022-0094.html

Code Behaviors & Features

Detect and mitigate GHSA-g23h-7vf9-xc25 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →

Affected versions

All versions before 0.1.39

Fixed versions

  • 0.1.39

Solution

Upgrade to version 0.1.39 or above.

Impact 5.3 MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Learn more about CVSS

Source file

cargo/mimalloc/GHSA-g23h-7vf9-xc25.yml

Spotted a mistake? Edit the file on GitLab.

  • Site Repo
  • About GitLab
  • Terms
  • Privacy Statement
  • Contact

Page generated Tue, 18 Nov 2025 12:18:26 +0000.