{"action":"Upgrade vm-memory to 0.12.2 or later.","affected":[{"fixed":"0.12.2","introduced":"0.0.0-0"}],"component":"vm-memory","cve_ids":["CVE-2023-41051"],"ecosystem":"crates.io","epss":0.00255,"exploited":false,"fixed_versions":["0.12.2"],"ghsa_id":"GHSA-49hh-fprx-m68g","id":"tcs_01M5KF8JDV5Q1YTJVNSW7MQVDH","modified_at":"2023-11-08T04:13:24.188980Z","published_at":"2023-09-01T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2023-0056","https://crates.io/crates/vm-memory","https://rustsec.org/advisories/RUSTSEC-2023-0056.html","https://github.com/rust-vmm/vm-memory/issues/250","https://github.com/rust-vmm/vm-memory/commit/aff1dd4a5259f7deba56692840f7a2d9ca34c9c8"],"severity":{"label":"low","score":2.5},"sources":[{"source":"osv","source_id":"RUSTSEC-2023-0056","url":"https://osv.dev/vulnerability/RUSTSEC-2023-0056"}],"summary":"Default functions in VolatileMemory trait lack bounds checks, potentially leading to out-of-bounds memory accesses"}