{"id":"GHSA-g753-ghr7-q33w","summary":"cyfs-base vulnerable to misaligned pointer dereference in `ChunkId::new`","details":"The function `ChunkId::new` creates a misaligned pointer by casting mutable pointer of `u8` slice which has alignment 1 to the mutable pointer of `u32` which has alignment 4, and dereference the misaligned pointer leading UB, which should not be allowed in safe function.\n","aliases":["RUSTSEC-2023-0046"],"modified":"2023-11-08T04:19:22.223054Z","published":"2023-06-22T20:01:55Z","database_specific":{"severity":"MODERATE","github_reviewed":true,"github_reviewed_at":"2023-06-22T20:01:55Z","nvd_published_at":null,"cwe_ids":[]},"references":[{"type":"WEB","url":"https://github.com/buckyos/CYFS/issues/275"},{"type":"WEB","url":"https://github.com/buckyos/CYFS/commit/e030188895096fd8d91d48753877729f4d37dd24"},{"type":"PACKAGE","url":"https://github.com/buckyos/CYFS"},{"type":"WEB","url":"https://rustsec.org/advisories/RUSTSEC-2023-0046.html"}],"affected":[{"package":{"name":"cyfs-base","ecosystem":"crates.io","purl":"pkg:cargo/cyfs-base"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"0.6.12"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/06/GHSA-g753-ghr7-q33w/GHSA-g753-ghr7-q33w.json"}}],"schema_version":"1.9.0"}