transpose

Version	Released
`0.2.3` unknown	Feb 20, 2024
`0.2.2` unknown 1 CVE	Nov 08, 2022
`0.2.1` unknown 1 CVE	Mar 31, 2021
`0.2.0` unknown 1 CVE	Jan 05, 2019
`0.1.0` unknown 1 CVE	Jan 02, 2019

0.2.3 unknown

Feb 20, 2024

0.2.2 unknown

1 CVE

CVE-2023-53156 GHSA-5gmm-6m36-r7jh RUSTSEC-2023-0080 Apr 05, 2024

transpose: Buffer overflow due to integer overflow

4.5 / 10

Medium

Local High None None Changed None Low Low

Given the function transpose::transpose:

fn transpose<T: Copy>(input: &[T], output: &mut [T], input_width: usize, input_height: usize)

The safety check input_width * input_height == output.len() can fail due to input_width * input_height overflowing in such a way that it equals output.len(). As a result of failing the safety check, memory past the end of output is written to. This only occurs in release mode since * panics on overflow in debug mode.

Exploiting this issue requires the caller to pass input_width and input_height arguments such that multiplying them overflows, and the overflown result equals the lengths of input and output slices.

Fixed in


          0.2.3

References

Updated Jul 28, 2025 · Source: OSV.dev

Nov 08, 2022

0.2.1 unknown

1 CVE

CVE-2023-53156 GHSA-5gmm-6m36-r7jh RUSTSEC-2023-0080 Apr 05, 2024

transpose: Buffer overflow due to integer overflow

4.5 / 10

Medium

Local High None None Changed None Low Low

Given the function transpose::transpose:

fn transpose<T: Copy>(input: &[T], output: &mut [T], input_width: usize, input_height: usize)

The safety check input_width * input_height == output.len() can fail due to input_width * input_height overflowing in such a way that it equals output.len(). As a result of failing the safety check, memory past the end of output is written to. This only occurs in release mode since * panics on overflow in debug mode.

Exploiting this issue requires the caller to pass input_width and input_height arguments such that multiplying them overflows, and the overflown result equals the lengths of input and output slices.

Fixed in


          0.2.3

References

Updated Jul 28, 2025 · Source: OSV.dev

Mar 31, 2021

0.2.0 unknown

1 CVE

CVE-2023-53156 GHSA-5gmm-6m36-r7jh RUSTSEC-2023-0080 Apr 05, 2024

transpose: Buffer overflow due to integer overflow

4.5 / 10

Medium

Local High None None Changed None Low Low

Given the function transpose::transpose:

fn transpose<T: Copy>(input: &[T], output: &mut [T], input_width: usize, input_height: usize)

The safety check input_width * input_height == output.len() can fail due to input_width * input_height overflowing in such a way that it equals output.len(). As a result of failing the safety check, memory past the end of output is written to. This only occurs in release mode since * panics on overflow in debug mode.

Exploiting this issue requires the caller to pass input_width and input_height arguments such that multiplying them overflows, and the overflown result equals the lengths of input and output slices.

Fixed in


          0.2.3

References

Updated Jul 28, 2025 · Source: OSV.dev

Jan 05, 2019

0.1.0 unknown

1 CVE

CVE-2023-53156 GHSA-5gmm-6m36-r7jh RUSTSEC-2023-0080 Apr 05, 2024

transpose: Buffer overflow due to integer overflow

4.5 / 10

Medium

Local High None None Changed None Low Low

Given the function transpose::transpose:

fn transpose<T: Copy>(input: &[T], output: &mut [T], input_width: usize, input_height: usize)

The safety check input_width * input_height == output.len() can fail due to input_width * input_height overflowing in such a way that it equals output.len(). As a result of failing the safety check, memory past the end of output is written to. This only occurs in release mode since * panics on overflow in debug mode.

Exploiting this issue requires the caller to pass input_width and input_height arguments such that multiplying them overflows, and the overflown result equals the lengths of input and output slices.

Fixed in


          0.2.3

References

Updated Jul 28, 2025 · Source: OSV.dev

Jan 02, 2019

Activity

Details