cve/2019/CVE-2019-12083.md

20 lines
980 B
Markdown
Raw Normal View History

2024-05-26 14:27:05 +02:00
### [CVE-2019-12083](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12083)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
### Description
The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust's safety guarantees and cause memory unsafety. If the `Error::type_id` method is overridden then any type can be safely cast to any other type, causing memory safety vulnerabilities in safe code (e.g., out-of-bounds write or read). Code that does not manually implement Error::type_id is unaffected.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/Artisan-Lab/Rust-memory-safety-bugs
- https://github.com/Qwaz/rust-cve
- https://github.com/xxg1413/rust-security