Vulnerability GHSA-ppqp-78xx-3r38
Critical
CRITICAL RISK
CVSS Score: 9.8
Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
5 years ago
August 25, 2021 at 08:53 PM UTC
Out of bounds write in calamine
0.1.0 - 0.16.2
0.1.0 - 0.16.2
Summary
Out of bounds write in calamine
Details
An issue was discovered in the calamine crate before 0.17.0 for Rust. It allows attackers to overwrite heap-memory locations because Vec::set_len is used without proper memory claiming, and this uninitialized memory is used for a user-provided Read operation, as demonstrated by Sectors::get.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
6 days ago
Panic and unbounded allocation (OOM) in the CFB/OLE2 parser on malformed input
0.1.0 - 0.37.0 RUSTSEC-2026-0436
0.1.0 - 0.37.0 RUSTSEC-2026-0436
Critical
5 years ago
`Sectors::get` accesses unclaimed/uninitialized memory
0.1.0 - 0.16.2 RUSTSEC-2021-0015
0.1.0 - 0.16.2 RUSTSEC-2021-0015
Impacted packages
Timeline
Published
5 years ago
August 25, 2021 at 08:53 PM UTC
Fixed (0.17.0)
5 years ago
February 03, 2021 at 01:43 PM UTC
Last Modified
2 years ago
November 08, 2023 at 04:05 AM UTC