CVE-2020-25016
Critical
Description
A safety violation was discovered in the rgb crate before 0.8.20 for Rust, leading to (for example) dereferencing of arbitrary pointers or disclosure of uninitialized memory. This occurs because structs can be treated as bytes for read and write operations.
SeverityCritical
CVSS9.1
Exploit probability—
ProductRgb-rust
PublishedAug 29, 2020
First seenAug 29, 2020
How to fix
Update
- rgb-rust_project rgb-rust0.8.20 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rgb-rust_project rgb-rust | v < 0.8.20 | 0.8.20 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.