Files
advisory-db/crates/stack/RUSTSEC-2020-0042.md
2021-01-04 09:02:59 -08:00

18 lines
453 B
Markdown

```toml
[advisory]
id = "RUSTSEC-2020-0042"
package = "stack"
aliases = ["CVE-2020-35895"]
date = "2020-09-24"
url = "https://github.com/arcnmx/stack-rs/issues/4"
[versions]
patched = [">= 0.3.1"]
```
# Missing check in ArrayVec leads to out-of-bounds write.
ArrayVec::insert allows insertion of an element into the array object into the
specified index. Due to a missing check on the upperbound of this index, it is
possible to write out of bounds.