{"id":"RUSTSEC-2025-0137","summary":"Unsoundness of safe `reciprocal_mg10`","details":"The function `reciprocal_mg10` is marked as safe but can trigger undefined behavior (out-of-bounds access) because it relies on `debug_assert!` for safety checks instead of `assert!`.\n\nWhen compiled in release mode, the `debug_assert!` is optimized out, potentially allowing invalid inputs to cause memory corruption.","aliases":["GHSA-9fjq-45qv-pcm7"],"modified":"2025-12-28T09:55:04.497626Z","published":"2025-12-22T12:00:00Z","database_specific":{"license":"CC0-1.0"},"references":[{"type":"PACKAGE","url":"https://crates.io/crates/ruint"},{"type":"ADVISORY","url":"https://rustsec.org/advisories/RUSTSEC-2025-0137.html"},{"type":"REPORT","url":"https://github.com/recmo/uint/issues/550"}],"affected":[{"package":{"name":"ruint","ecosystem":"crates.io","purl":"pkg:cargo/ruint"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"1.17.1"}]}],"ecosystem_specific":{"affected_functions":null,"affects":{"functions":["ruint::algorithms::div::reciprocal_mg10"],"os":[],"arch":[]}},"database_specific":{"categories":["memory-corruption"],"cvss":null,"informational":null,"source":"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2025-0137.json"}}],"schema_version":"1.7.3"}