Vulnerability RUSTSEC-2026-0008
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
8 months ago
February 02, 2026 at 12:00 PM UTC
Potential undefined behavior when dereferencing Buf struct
0.0.1 - 0.20.3
0.0.1 - 0.20.3
Summary
Potential undefined behavior when dereferencing Buf struct
Details
if we dereference the Buf struct right after calling new() or default() on Buf struct, it passes Null Pointer to the unsafe function slice::from_raw_parts. Based on the safety section documentation of function, data must be non-null and aligned even for zero-length slices or slices of ZSTs. Thus, passing Null Pointer will lead to undefined behavior.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
5 months ago
Potential undefined behavior with Signature from a buffer-created BlameHunk
0.0.1 - 0.20.4 RUSTSEC-2026-0184
0.0.1 - 0.20.4 RUSTSEC-2026-0184
Unknown
5 months ago
Potential undefined behavior when calling Remote::list()
0.0.1 - 0.20.4 RUSTSEC-2026-0183
0.0.1 - 0.20.4 RUSTSEC-2026-0183
Low Risk
8 months ago
git2 has potential undefined behavior when dereferencing Buf struct
0.0.1 - 0.20.3 GHSA-j39j-6gw9-jw6h
0.0.1 - 0.20.3 GHSA-j39j-6gw9-jw6h
Medium Risk
3 years ago
git2-rs fails to verify SSH keys by default
0.0.1 - 0.16.0 GHSA-m4ch-rfv5-x5g3
0.0.1 - 0.16.0 GHSA-m4ch-rfv5-x5g3
Impacted packages
Timeline
Published
8 months ago
February 02, 2026 at 12:00 PM UTC
Fixed (0.20.4)
8 months ago
February 02, 2026 at 02:57 PM UTC
Last Modified
8 months ago
February 05, 2026 at 06:56 AM UTC