{"id":"GHSA-f7qj-v3vp-4856","aliases":["RUSTSEC-2024-0424"],"url":"https://o3.security/vulnerability/GHSA-f7qj-v3vp-4856","summary":"libafl has unsound usages of `core::slice::from_raw_parts_mut` ","details":"The library breaks the safety assumptions when using unsafe API `slice::from_raw_parts_mut`. The pointer passed to `from_raw_parts_mut` is misaligned by casting `u8` to `u16` raw pointer directly, which is unsound. The bug is patched by using `align_offset`, which could make sure the memory address is aligned to 2 bytes for `u16`.  \n\nThis was patched in 0.11.2 in the [commit](https://github.com/AFLplusplus/LibAFL/pull/1530/commits/5a60cb31ef587d71d09d534bba39bd3973c4b35d).\n","published":"2024-12-23T19:28:19Z","modified":"2025-10-28T06:29:24.276187Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"crates.io","name":"libafl","fixedVersion":"0.11.2"}],"fix":{"url":"https://github.com/AFLplusplus/LibAFL/pull/1530","label":"AFLplusplus/LibAFL#1530"},"references":[{"type":"WEB","url":"https://github.com/AFLplusplus/LibAFL/issues/1526"},{"type":"WEB","url":"https://github.com/AFLplusplus/LibAFL/pull/1530"},{"type":"WEB","url":"https://github.com/AFLplusplus/LibAFL/pull/1530/commits/5a60cb31ef587d71d09d534bba39bd3973c4b35d"},{"type":"WEB","url":"https://github.com/AFLplusplus/LibAFL/commit/f70a16a09a8096d3c50159dd8a912a75c2af157c"},{"type":"PACKAGE","url":"https://github.com/AFLplusplus/LibAFL"},{"type":"WEB","url":"https://rustsec.org/advisories/RUSTSEC-2024-0424.html"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2025-10-28T06:29:24.276187Z"}}