{"id":"GHSA-qm2p-4w45-v2vr","summary":"grcov has an out of bounds write triggered by crafted coverage data","details":"Function `grcov::covdir::get_coverage` uses the `unsafe` function `get_unchecked_mut` without validating that the index is in bounds.\n\nThis results in memory corruption, and could potentially allow arbitrary code execution provided that an attacker can feed the tool crafted coverage data.","aliases":["RUSTSEC-2025-0005"],"modified":"2025-10-28T06:29:25.945179Z","published":"2025-02-10T18:07:30Z","database_specific":{"github_reviewed":true,"github_reviewed_at":"2025-02-10T18:07:30Z","nvd_published_at":null,"cwe_ids":["CWE-787"],"severity":"MODERATE"},"references":[{"type":"WEB","url":"https://github.com/mozilla/grcov/commit/c8219563bc91615dd4a27884a5c63f09db8d03bb"},{"type":"WEB","url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1917475"},{"type":"PACKAGE","url":"https://github.com/mozilla/grcov"},{"type":"WEB","url":"https://rustsec.org/advisories/RUSTSEC-2025-0005.html"}],"affected":[{"package":{"name":"grcov","ecosystem":"crates.io","purl":"pkg:cargo/grcov"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.8.20"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/02/GHSA-qm2p-4w45-v2vr/GHSA-qm2p-4w45-v2vr.json"}}],"schema_version":"1.9.0"}