Files
advisory-db/crates/cbox/RUSTSEC-2020-0005.md
2021-01-04 09:02:59 -08:00

485 B

[advisory]
id = "RUSTSEC-2020-0005"
package = "cbox"
aliases = ["CVE-2020-35860"]
categories = ["memory-corruption"]
date = "2020-03-19"
url = "https://github.com/TomBebbington/cbox-rs/issues/2"

[versions]
patched = []

CBox API allows to de-reference raw pointers without unsafe code

CBox and CSemiBox are part of the public API of the cbox crate and they allow to create smart pointers from raw pointers and de-reference them without the need of unsafe code.