{"id":"CVE-2019-12083","details":"The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust's safety guarantees and cause memory unsafety. If the `Error::type_id` method is overridden then any type can be safely cast to any other type, causing memory safety vulnerabilities in safe code (e.g., out-of-bounds write or read). Code that does not manually implement Error::type_id is unaffected.","modified":"2026-04-02T03:27:12.238418Z","published":"2019-05-13T20:29:02.913Z","related":["SUSE-SU-2019:2439-1","SUSE-SU-2019:2755-1","openSUSE-SU-2019:2203-1","openSUSE-SU-2019:2244-1","openSUSE-SU-2019:2294-1","openSUSE-SU-2024:11359-1","openSUSE-SU-2024:11360-1"],"references":[{"type":"WEB","url":"https://groups.google.com/forum/#%21topic/rustlang-security-announcements/aZabeCMUv70"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HG47HYH3AQTUMBUMX3S3G5DNAY4CBW6N/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K6T4BNA5KQYJRIKIGGBOGBMR7TRXPHLR/"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00031.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00076.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00006.html"},{"type":"EVIDENCE","url":"https://blog.rust-lang.org/2019/05/13/Security-advisory.html"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/rust-lang/rust","events":[{"introduced":"91856ed52c58aa5ba66a015354d1cc69e9779bdf"},{"fixed":"6c2484dc3c532c052f159264e970278d8b77cdc9"}],"database_specific":{"versions":[{"introduced":"1.34.0"},{"fixed":"1.34.2"}]}}],"versions":["1.34.0","1.34.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-12083.json","unresolved_ranges":[{"events":[{"introduced":"0"},{"last_affected":"29"}]},{"events":[{"introduced":"0"},{"last_affected":"30"}]},{"events":[{"introduced":"0"},{"last_affected":"15.1"}]}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}