Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in the calamine crate before 0.17.0 for Rust. It allows attackers to overwrite heap-memory locations because Vec::set_len is used without proper memory claiming, and this uninitialized memory is used for a user-provided Read operation, as demonstrated by Sectors::get.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Rust 缓冲区错误漏洞
Vulnerability Description
Rust是Mozilla基金会的一款通用、编译型编程语言。 Rust 的 Calamine Crate 0.17.0 之前版本中存在缓冲区错误漏洞，该漏洞源于允许攻击者覆盖堆内存位置，因为Vec::set_len使用时没有适当的内存声明，并且这些未初始化的内存用于用户提供的读操作，如Sectors::get所示。
CVSS Information
N/A
Vulnerability Type
N/A