Vulnetix
Try Vulnetix Request Demo
CVE-2019-12083 PUBLISHED CVSS 6.800000190734863 MEDIUM

The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust's safety guarantees and cause memory unsafety. If the `Error::type_id` method is overridden then any type can be safely cast to any other type, causing memory safety vulnerabilities in safe code (e.g., out-of-bounds write or read). Code that does not manually implement Error::type_id is unaffected.

EPSS 0.76% · 73.3th percentile

Risk Scores

CVSS v2.0
6.800000190734863
EPSS Score
0.76%
73.3th percentile

Affected Products

VendorProductVersions
fedoraprojectfedora29, 30
n/an/an/a
rust-langrust1.34.0
opensuseleap15.1

Timeline

References

Open in Interactive Console →