Find real vulnerabilities before they ship
An issue was discovered in the bumpalo crate before 3.2.1 for Rust. The realloc feature allows the reading of unknown memory. Attackers can potentially read cryptographic keys.
Base Score
7.5| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| bumpalo(crates.io) | 3.0.0 | 3.2.1 | N/A |
| Base Score | 7.5 |
|---|---|
| Vector String | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| Base Severity | High |
| Version | 3.1 |
| Attack Vector (AV) | NETWORK |
