crates.io/vm-memory CVE-2023-41051: low 2.5, EPSS 0.26%
Default functions in VolatileMemory trait lack bounds checks, potentially leading to out-of-bounds memory accesses
Action: Upgrade vm-memory to 0.12.2 or later.
cargo update -p vm-memory --precise 0.12.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-0 | 0.12.2 | - |
Fixed versions
| 0.12.2 |
Sources
- osv: RUSTSEC-2023-0056
- https://crates.io/crates/vm-memory
- https://rustsec.org/advisories/RUSTSEC-2023-0056.html
- https://github.com/rust-vmm/vm-memory/issues/250
- https://github.com/rust-vmm/vm-memory/commit/aff1dd4a5259f7deba56692840f7a2d9ca34c9c8
CVE-2023-41051 · published · modified · JSON