crates.io/arr CVE-2020-35886, CVE-2020-35887, CVE-2020-35888: critical 9.8, EPSS 0.19%

Multiple security issues including data race, buffer overflow, and uninitialized memory drop in arr

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-fhvj-7f9p-w788
• https://nvd.nist.gov/vuln/detail/CVE-2020-35887
• https://github.com/sjep/array/issues/1
• https://github.com/sjep/array
• https://rustsec.org/advisories/RUSTSEC-2020-0034.html

CVE-2020-35886, CVE-2020-35887, CVE-2020-35888 · published 2021-08-25T20:48:54Z · modified 2024-03-15T00:05:27.030752Z · JSON