Moole Vulnerability Database

Find real vulnerabilities before they ship

Critical

CVE-2018-20998

An issue was discovered in the arrayfire crate before 3.6.0 for Rust. Addition of the repr() attribute to an enum is mishandled, leading to memory corruption.

VectorNETWORK

PublishedAug 26, 2019, 18:15

Published Bycve@mitre.org

Base Score

Score9.8

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

arrayfire(crates.io)03.6.0N/A

arrayfire(PyPI)03.6.0N/A

References

https://rustsec.org/advisories/RUSTSEC-2018-0011.html

Weakness Type

CWE-119

CVSS Metrics

Base Score

9.8

Vector String

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Base SeverityCritical

Version

3.0

Attack Vector (AV)

NETWORK