{"id":"GHSA-h5j3-crg5-8jqm","summary":"orx-pinned-vec has undefined behavior in index_of_ptr with empty slices","details":"The safe function `index_of_ptr` causes undefined behavior when called with an empty slice.\n\nThe issue occurs in the line `ptr.add(slice.len() - 1)` which underflows when `slice.len()` is 0, creating a pointer with a massive offset. According to Rust's safety rules, creating such a pointer causes immediate undefined behavior.","aliases":["RUSTSEC-2025-0106"],"modified":"2025-10-28T06:29:24.973717Z","published":"2025-10-21T21:54:27Z","database_specific":{"nvd_published_at":null,"cwe_ids":["CWE-119","CWE-191"],"severity":"LOW","github_reviewed":true,"github_reviewed_at":"2025-10-21T21:54:27Z"},"references":[{"type":"WEB","url":"https://github.com/orxfun/orx-pinned-vec/issues/52"},{"type":"WEB","url":"https://github.com/orxfun/orx-pinned-vec/pull/53"},{"type":"WEB","url":"https://github.com/orxfun/orx-pinned-vec/commit/4a4007a1aaff25cd417853c76163883a7110e276"},{"type":"PACKAGE","url":"https://github.com/orxfun/orx-pinned-vec"},{"type":"WEB","url":"https://rustsec.org/advisories/RUSTSEC-2025-0106.html"}],"affected":[{"package":{"name":"orx-pinned-vec","ecosystem":"crates.io","purl":"pkg:cargo/orx-pinned-vec"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.21.0"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/10/GHSA-h5j3-crg5-8jqm/GHSA-h5j3-crg5-8jqm.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P"}]}