Buffer Overflow Vulnerability in Rust Standard Library

CVE-2021-28875

What is CVE-2021-28875?

In the Rust programming language, prior to version 1.50.0, a vulnerability exists in the standard library's read_to_end() function. This function fails to properly validate return values from the Read trait in potentially unsafe contexts, which may allow for a buffer overflow. Exploitation of this vulnerability can lead to unpredictable behavior, including injection of malicious code into memory. Developers using affected versions of Rust are advised to update to ensure the integrity and security of their applications.

References