Vulnerability RUSTSEC-2025-0047
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
1 year ago
August 12, 2025 at 12:00 PM UTC
Out-of-bounds access in `get_disjoint_mut` due to incorrect bounds check
0.4.10
0.4.10
Summary
Out-of-bounds access in `get_disjoint_mut` due to incorrect bounds check
Details
Impact
The get_disjoint_mut method in slab v0.4.10 incorrectly checked if indices were within the slab's capacity instead of its length, allowing access to uninitialized memory. This could lead to undefined behavior or potential crashes.
Patches
This has been fixed in slab v0.4.11.
Workarounds
Avoid using get_disjoint_mut with indices that might be beyond the slab's actual length, or upgrade to v0.4.11 or later.
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Impacted packages
Timeline
Published
1 year ago
August 12, 2025 at 12:00 PM UTC
Fixed (0.4.11)
1 year ago
August 08, 2025 at 07:40 AM UTC
Last Modified
1 hour ago
October 12, 2026 at 06:00 PM UTC