{"id":"GHSA-f9g6-fp84-fv92","aliases":["RUSTSEC-2023-0047"],"url":"https://o3.security/vulnerability/GHSA-f9g6-fp84-fv92","summary":"impl `FromMdbValue` for bool is unsound","details":"The implementation of `FromMdbValue` has several unsoundness issues. First of all, it allows to reinterpret arbitrary bytes as a bool and could make undefined behavior happen with safe function. Secondly, it allows transmuting pointer without taking memory layout into consideration. The details of reproducing the bug are available [here](https://github.com/vhbit/lmdb-rs/issues/67).\n","published":"2023-07-19T22:09:38Z","modified":"2023-11-08T04:18:55.242781Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"crates.io","name":"lmdb-rs","fixedVersion":null}],"fix":null,"references":[{"type":"WEB","url":"https://github.com/vhbit/lmdb-rs/issues/67"},{"type":"PACKAGE","url":"https://github.com/vhbit/lmdb-rs"},{"type":"WEB","url":"https://rustsec.org/advisories/RUSTSEC-2023-0047.html"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2023-11-08T04:18:55.242781Z"}}