{"action":"Upgrade vku to 0.4.0 or later.","affected":[{"fixed":"0.4.0","introduced":"0.0.0-0"}],"component":"vku","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.4.0"],"id":"tcs_01M5KFAMBK0D2RZ67XJ6RM5PWZ","modified_at":"2026-05-20T13:45:04.461804188Z","published_at":"2025-04-23T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2025-0162","https://crates.io/crates/vku","https://rustsec.org/advisories/RUSTSEC-2025-0162.html","https://github.com/ArrowMaxGithub/vku/issues/5","https://github.com/ArrowMaxGithub/vku/commit/ce02c19ec35e5ee84c00ec5005be9d6d44599b5f"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2025-0162","url":"https://osv.dev/vulnerability/RUSTSEC-2025-0162"}],"summary":"`VMABuffer::set_data` may allow out-of-bounds writes from safe code"}