crates.io binary_vec_io vulnerabilities

Latest crates.io binary_vec_io CVEs

Newest publication first

1. GHSA-wwxp-hxh6-8gf8 binary_vec_io access memory out-of-bounds in binary_read_to_ref and binary_write_from_ref

   Published 2025-10-22

   High·CVSS 7.3

   Safe functions accept a single &T or &mut T but multiply by n to create slices extending beyond allocated memory when n > 1. These functions use from_raw_parts to create slices larger than the underlying allocation, violating memory safety. The binary_vec_io repository is archive...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.