https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 05 Nov 2026 12:39:06 +0000 https://db.gcve.eu/vuln/rustsec-2024-0442 <p><strong>Affected:</strong> crates.io: wasmtime-jit-debug</p> <p>The unsound function `dump_code_load_record` uses `from_raw_parts` to directly convert the pointer `addr` and `len` into a slice without any validation and that memory block would be dumped.</p> <p>Thus, the &#39;safe&#39; function dump_code_load_record is actually &#39;unsafe&#39; since it requires the caller to guarantee that the addr is valid and len must not overflow. Otherwise, the function could dump the memory into file illegally, causing memory leak.</p> <p>&gt; **Note**: this is an internal-only crate in the Wasmtime project not intended for external use and is more strongly signaled nowadays as of [bytecodealliance/wasmtime#10963](https://github.com/bytecodealliance/wasmtime/pull/10963). Please open an issue in Wasmtime if you&#39;re using this crate directly.</p> <p><strong>Affected:</strong> crates.io: wasmtime-jit-debug</p> <p>The unsound function `dump_code_load_record` uses `from_raw_parts` to directly convert the pointer `addr` and `len` into a slice without any validation and that memory block would be dumped.</p> <p>Thus, the &#39;safe&#39; function dump_code_load_record is actually &#39;unsafe&#39; since it requires the caller to guarantee that the addr is valid and len must not overflow. Otherwise, the function could dump the memory into file illegally, causing memory leak.</p> <p>&gt; **Note**: this is an internal-only crate in the Wasmtime project not intended for external use and is more strongly signaled nowadays as of [bytecodealliance/wasmtime#10963](https://github.com/bytecodealliance/wasmtime/pull/10963). Please open an issue in Wasmtime if you&#39;re using this crate directly.</p> https://db.gcve.eu/vuln/rustsec-2024-0442