{"id":"GHSA-pfp7-vxgr-83pw","aliases":["RUSTSEC-2025-0062"],"url":"https://o3.security/vulnerability/GHSA-pfp7-vxgr-83pw","summary":"toodee is vulnerable to Heap Buffer Overflow through its DrainCol Destructor","details":"An off-by-one error in the `DrainCol::drop` destructor could cause an unsafe memory copy operation to exceed the bounds of the associated vector.\n\nThe error was related to the size of the data being copied in one of the `ptr::copy` invocations inside the destructor.\n\nWhen removing the first column from a TooDee object, the DrainCol return object could cause a heap buffer overflow vulnerability when it is dropped.\n\nThe issue was fixed in commit `e6e16d5` by reducing the copied size by one.","published":"2025-09-09T15:23:43Z","modified":"2025-10-28T06:29:25.567885Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"crates.io","name":"toodee","fixedVersion":"0.6.0"}],"fix":{"url":"https://github.com/antonmarsden/toodee/commit/e6e16d5a97e6258ffbedbae1bde65b45c60f242f","label":"antonmarsden/toodee@e6e16d5"},"references":[{"type":"WEB","url":"https://github.com/antonmarsden/toodee/issues/26"},{"type":"WEB","url":"https://github.com/antonmarsden/toodee/commit/e6e16d5a97e6258ffbedbae1bde65b45c60f242f"},{"type":"PACKAGE","url":"https://github.com/antonmarsden/toodee"},{"type":"WEB","url":"https://rustsec.org/advisories/RUSTSEC-2025-0062.html"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2025-10-28T06:29:25.567885Z"}}