crates.io/grcov: medium
grcov has an out of bounds write triggered by crafted coverage data
Action: Upgrade grcov to 0.8.20 or later.
cargo update -p grcov --precise 0.8.20Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.8.20 | - |
Fixed versions
| 0.8.20 |
Sources
- osv: GHSA-qm2p-4w45-v2vr
- https://github.com/mozilla/grcov/commit/c8219563bc91615dd4a27884a5c63f09db8d03bb
- https://bugzilla.mozilla.org/show_bug.cgi?id=1917475
- https://github.com/mozilla/grcov
- https://rustsec.org/advisories/RUSTSEC-2025-0005.html
published · modified · JSON