{"id":"CVE-2018-1000810","details":"The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126.2, 126.1, 126.0 contains a CWE-680: Integer Overflow to Buffer Overflow vulnerability in standard library that can result in buffer overflow. This attack appear to be exploitable via str::repeat, passed a large number, can overflow an internal buffer. This vulnerability appears to have been fixed in 1.29.1.","modified":"2026-07-08T06:01:14.444363305Z","published":"2018-10-08T15:29:01.227Z","database_specific":{"unresolved_ranges":[{"vendor_product":"rust-lang:rust","cpes":["cpe:2.3:a:rust-lang:rust:1.26.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.26.0"},{"last_affected":"1.26.0"}],"source":"CPE_STRING"}]},"references":[{"type":"WEB","url":"https://groups.google.com/forum/#%21topic/rustlang-security-announcements/CmSuTm-SaU0"},{"type":"ADVISORY","url":"https://blog.rust-lang.org/2018/09/21/Security-advisory-for-std.html"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/201812-11"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/rust-lang/rust","events":[{"introduced":"a7756804103447ea4e68a71ccf071e7ad8f7a03e"},{"last_affected":"aa3ca1994904f2e056679fce1f185db8c7ed2703"}],"database_specific":{"cpe":["cpe:2.3:a:rust-lang:rust:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:rust-lang:rust:1.26.1:*:*:*:*:*:*:*","cpe:2.3:a:rust-lang:rust:1.26.2:*:*:*:*:*:*:*","cpe:2.3:a:rust-lang:rust:1.27.0:*:*:*:*:*:*:*","cpe:2.3:a:rust-lang:rust:1.27.1:*:*:*:*:*:*:*","cpe:2.3:a:rust-lang:rust:1.27.2:*:*:*:*:*:*:*","cpe:2.3:a:rust-lang:rust:1.28.0:*:*:*:*:*:*:*","cpe:2.3:a:rust-lang:rust:1.29.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.26.0"},{"last_affected":"1.26.0"},{"introduced":"1.26.1"},{"last_affected":"1.26.1"},{"introduced":"1.26.2"},{"last_affected":"1.26.2"},{"introduced":"1.27.0"},{"last_affected":"1.27.0"},{"introduced":"1.27.1"},{"last_affected":"1.27.1"},{"introduced":"1.27.2"},{"last_affected":"1.27.2"},{"introduced":"1.28.0"},{"last_affected":"1.28.0"},{"introduced":"1.29.0"},{"last_affected":"1.29.0"}],"source":"CPE_STRING"}}],"versions":["1.26.0","1.26.1","1.26.2","1.27.0","1.27.1","1.27.2","1.28.0","1.29.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1000810.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}