fast-float
Activity
- Latest release
- 5y ago
- Total releases
- 2
- Cadence
- ~3 days
- Last 12 months
- 0
Details
- License
- MIT OR Apache-2.0
- First release
- Jan 10, 2021
| Version | Released | |
|---|---|---|
0.2.0
unknown
2 CVEs
GHSA-8655-xgh5-5vvq
RUSTSEC-2025-0003
Jan 29, 2025
fast-fault has a segmentation fault due to lack of bound check
Medium
In this case, the "fast_float::common::AsciiStr::first" method within the "AsciiStr" struct uses the unsafe keyword to reading from memory without performing bounds checking. Specifically, it directly dereferences a pointer offset by "self.ptr". Because of the above reason, the method accesses invalid memory address when it takes an empty string as its input. This approach violates Rust’s memory safety guarantees, as it can lead to invalid memory access if empty buffer is provided. No patched version for fast-float crate has been released, but a patch is available in the fast-float2 fork. References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-x8jh-xj3x-gx3c
RUSTSEC-2024-0379
Nov 12, 2024
`fast-float` has multiple soundness issues
Low
Network
Low
None
None
The library is also unmaintained. AlternativesFor quickly parsing floating-point numbers third-party crates are generally no longer needed. A fast float parsing algorithm by the author of References Updated Sep 10, 2026 · Source: OSV.dev |
0.2.0
unknown
Dependencies (5)
|
|
0.1.0
unknown
2 CVEs
GHSA-8655-xgh5-5vvq
RUSTSEC-2025-0003
Jan 29, 2025
fast-fault has a segmentation fault due to lack of bound check
Medium
In this case, the "fast_float::common::AsciiStr::first" method within the "AsciiStr" struct uses the unsafe keyword to reading from memory without performing bounds checking. Specifically, it directly dereferences a pointer offset by "self.ptr". Because of the above reason, the method accesses invalid memory address when it takes an empty string as its input. This approach violates Rust’s memory safety guarantees, as it can lead to invalid memory access if empty buffer is provided. No patched version for fast-float crate has been released, but a patch is available in the fast-float2 fork. References Updated Sep 10, 2026 · Source: OSV.dev
GHSA-x8jh-xj3x-gx3c
RUSTSEC-2024-0379
Nov 12, 2024
`fast-float` has multiple soundness issues
Low
Network
Low
None
None
The library is also unmaintained. AlternativesFor quickly parsing floating-point numbers third-party crates are generally no longer needed. A fast float parsing algorithm by the author of References Updated Sep 10, 2026 · Source: OSV.dev |
0.1.0
unknown
Dependencies (2)
|