Vulnerability RUSTSEC-2026-0008

Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
8 months ago
February 02, 2026 at 12:00 PM UTC
Potential undefined behavior when dereferencing Buf struct
0.0.1 - 0.20.3
0.0.1 - 0.20.3

Summary

Potential undefined behavior when dereferencing Buf struct

Details

if we dereference the Buf struct right after calling new() or default() on Buf struct, it passes Null Pointer to the unsafe function slice::from_raw_parts. Based on the safety section documentation of function, data must be non-null and aligned even for zero-length slices or slices of ZSTs. Thus, passing Null Pointer will lead to undefined behavior.

Impacted packages

Timeline

Published
8 months ago
February 02, 2026 at 12:00 PM UTC
Fixed (0.20.4)
8 months ago
February 02, 2026 at 02:57 PM UTC
Last Modified
8 months ago
February 05, 2026 at 06:56 AM UTC