Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-qm2p-4w45-v2vr: grcov has an out of bounds write triggered by crafted coverage data

Function grcov::covdir::get_coverage uses the unsafe function get_unchecked_mut without validating that the index is in bounds.

This results in memory corruption, and could potentially allow arbitrary code execution provided that an attacker can feed the tool crafted coverage data.

ghsa
#git

grcov has an out of bounds write triggered by crafted coverage data

Moderate severity GitHub Reviewed Published Feb 10, 2025 to the GitHub Advisory Database • Updated Feb 10, 2025

ghsa: Latest News

GHSA-826p-4gcg-35vw: GeoTools has XML External Entity (XXE) Processing Vulnerability in XSD schema handling