high7.5
CVE-2020-35861
Out of bounds read in bumpalo
Impact
An issue was discovered in the bumpalo crate before 3.2.1 for Rust. The realloc feature allows the reading of unknown memory. Attackers can potentially read cryptographic keys.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| rust | bumpalo | >= 3.0.0, < 3.2.1 | 3.2.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bumpalo Project | Bumpalo | from 3.0.0 before 3.2.1 |