Vulnerability GHSA-qx2v-8332-m4fv
Medium Risk
MEDIUM RISK
CVSS Score: 6.0
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
1 year ago
August 11, 2025 at 10:45 PM UTC
slab allows out-of-bounds access in `get_disjoint_mut` due to incorrect bounds check
0.4.10
0.4.10
Summary
slab allows out-of-bounds access in `get_disjoint_mut` due to incorrect bounds check
Details
Impact
The get_disjoint_mut method in slab v0.4.10 incorrectly checked if indices were within the slab's capacity instead of its length, allowing access to uninitialized memory. This could lead to undefined behavior or potential crashes.
Patches
This has been fixed in slab v0.4.11.
Workarounds
Avoid using get_disjoint_mut with indices that might be beyond the slab's actual length, or upgrade to v0.4.11 or later.
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Impacted packages
Timeline
Published
1 year ago
August 11, 2025 at 10:45 PM UTC
Fixed (0.4.11)
1 year ago
August 08, 2025 at 07:40 AM UTC
Last Modified
1 month ago
September 10, 2026 at 03:50 AM UTC