Description (CNA)
Grid is a data structure grid for rust. From version 0.17.0 to before version 1.0.1, an integer overflow in Grid::expand_rows() can corrupt the relationship between the grid’s logical dimensions and its backing storage. After the internal invariant is broken, the safe API get() may invoke get_unchecked() with an invalid index, resulting in Undefined Behavior. This issue has been patched in version 1.0.1.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| becheran / grid | affected >= 0.17.0, < 1.0.1 |
CWE
CWE-190
References
- https://github.com/becheran/grid/security/advisories/GHSA-38c5-483c-4qqp
- https://github.com/becheran/grid/commit/be213bd3528727148bef2d523c89e95d1fd9c072
- https://github.com/becheran/grid/releases/tag/v1.0.1
ADP enrichment
No English description supplied.