{"id":"GHSA-g753-ghr7-q33w","aliases":["RUSTSEC-2023-0046"],"url":"https://o3.security/vulnerability/GHSA-g753-ghr7-q33w","summary":"cyfs-base vulnerable to misaligned pointer dereference in `ChunkId::new`","details":"The function `ChunkId::new` creates a misaligned pointer by casting mutable pointer of `u8` slice which has alignment 1 to the mutable pointer of `u32` which has alignment 4, and dereference the misaligned pointer leading UB, which should not be allowed in safe function.\n","published":"2023-06-22T20:01:55Z","modified":"2023-11-08T04:19:22.223054Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"crates.io","name":"cyfs-base","fixedVersion":null}],"fix":{"url":"https://github.com/buckyos/CYFS/commit/e030188895096fd8d91d48753877729f4d37dd24","label":"buckyos/CYFS@e030188"},"references":[{"type":"WEB","url":"https://github.com/buckyos/CYFS/issues/275"},{"type":"WEB","url":"https://github.com/buckyos/CYFS/commit/e030188895096fd8d91d48753877729f4d37dd24"},{"type":"PACKAGE","url":"https://github.com/buckyos/CYFS"},{"type":"WEB","url":"https://rustsec.org/advisories/RUSTSEC-2023-0046.html"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2023-11-08T04:19:22.223054Z"}}