Out-of-bounds read In auto_vec
Description
Invalid pointer arithmetic in iter() and iter_mut()
The iter() and iter_mut() APIs compute
current = (&children[0] as *const *const RawAutoChild).sub(1), which
performs pointer subtraction going before the start of the allocation. This
is undefined behavior per Rust's pointer arithmetic rules.
This can be triggered through safe public APIs — iter() and iter_mut()
— with no unsafe required from the caller.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version |
|---|---|---|
 cargo |
Aliases
1. 2. 3.
References
1.