CVE-2020-25016

Katalog CVE

CVSS 9.1 · Critical EPSS 1,6%

Kerentanan Improper Restriction of Operations within the Bounds of a Memory Buffer pada rgb-rust project rgb-rust. Skor CVSS 3.1 9.1 (Critical) menurut NVD.

Deskripsi (NVD)

A safety violation was discovered in the rgb crate before 0.8.20 for Rust, leading to (for example) dereferencing of arbitrary pointers or disclosure of uninitialized memory. This occurs because structs can be treated as bytes for read and write operations.

Rincian

Terbit di NVD

29 Agustus 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.1 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')

EPSS (30 hari)

1,6% peluang dieksploitasi; lebih tinggi dari 75,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://rustsec.org/advisories/RUSTSEC-2020-0029.html advisory vendor
• https://github.com/kornelski/rust-rgb/issues/35 exploit · advisory pihak ketiga