Headline
GHSA-qm2p-4w45-v2vr: grcov has an out of bounds write triggered by crafted coverage data
Function grcov::covdir::get_coverage
uses the unsafe
function get_unchecked_mut
without validating that the index is in bounds.
This results in memory corruption, and could potentially allow arbitrary code execution provided that an attacker can feed the tool crafted coverage data.
grcov has an out of bounds write triggered by crafted coverage data
Moderate severity GitHub Reviewed Published Feb 10, 2025 to the GitHub Advisory Database • Updated Feb 10, 2025