GHSA-3mv5-343c-w2qg
Ref methods into_ref, into_mut, into_slice, and into_slice_mut are unsound when used with cell::Ref or cell::RefMut
This advisory is also published as RUSTSEC-2023-0074.
The Ref methods into_ref, into_mut, into_slice, and into_slice_mut are unsound and may allow safe code to exhibit undefined behavior when used with Ref<B, T> where B is cell::Ref or cell::RefMut. Note that these methods remain sound when used with B types other than cell::Ref or cell::RefMut.
See https://github.com/google/zerocopy/issues/716 for a more in-depth analysis.
The current plan is to yank the affected versions soon. See https://github.com/google/zerocopy/issues/679 for more detail.
What each source reports
GitHub AdvisoriesNo score
Ref methods into_ref, into_mut, into_slice, and into_slice_mut are unsound when used with cell::Ref or cell::RefMut
This advisory is also published as RUSTSEC-2023-0074.
The Ref methods into_ref, into_mut, into_slice, and into_slice_mut are unsound and may allow safe code to exhibit undefined behavior when used with Ref<B, T> where B is cell::Ref or cell::RefMut. Note that these methods remain sound when used with B types other than cell::Ref or cell::RefMut.
See https://github.com/google/zerocopy/issues/716 for a more in-depth analysis.
The current plan is to yank the affected versions soon. See https://github.com/google/zerocopy/issues/679 for more detail.
- Record
GHSA-3mv5-343c-w2qg- Updated
- 2026-11-02
GitHub AdvisoriesGHSA-rjhf-4mh8-9xjqNo score
Zerocopy: Some Ref methods are unsound with some type parameters
The Ref methods into_ref, into_mut, into_slice, and into_slice_mut are unsound and may allow safe code to exhibit undefined behavior when used with Ref<B, T> where B is cell::Ref or cell::RefMut. Note that these methods remain sound when used with B types other than cell::Ref or cell::RefMut.
See https://github.com/google/zerocopy/issues/716 for a more in-depth analysis.
The current plan is to yank the affected versions soon. See https://github.com/google/zerocopy/issues/679 for more detail.
- Record
GHSA-rjhf-4mh8-9xjq- Updated
- 2026-11-02
OSVNo score
Ref methods into_ref, into_mut, into_slice, and into_slice_mut are unsound when used with cell::Ref or cell::RefMut
This advisory is also published as RUSTSEC-2023-0074.
The Ref methods into_ref, into_mut, into_slice, and into_slice_mut are unsound and may allow safe code to exhibit undefined behavior when used with Ref<B, T> where B is cell::Ref or cell::RefMut. Note that these methods remain sound when used with B types other than cell::Ref or cell::RefMut.
See https://github.com/google/zerocopy/issues/716 for a more in-depth analysis.
The current plan is to yank the affected versions soon. See https://github.com/google/zerocopy/issues/679 for more detail.
- Record
GHSA-3mv5-343c-w2qg- Updated
- 2026-11-02
OSVGHSA-rjhf-4mh8-9xjqNo score
Zerocopy: Some Ref methods are unsound with some type parameters
The Ref methods into_ref, into_mut, into_slice, and into_slice_mut are unsound and may allow safe code to exhibit undefined behavior when used with Ref<B, T> where B is cell::Ref or cell::RefMut. Note that these methods remain sound when used with B types other than cell::Ref or cell::RefMut.
See https://github.com/google/zerocopy/issues/716 for a more in-depth analysis.
The current plan is to yank the affected versions soon. See https://github.com/google/zerocopy/issues/679 for more detail.
- Record
GHSA-rjhf-4mh8-9xjq- Updated
- 2026-11-02
OSVRUSTSEC-2023-0074No score
Some Ref methods are unsound with some type parameters
The Ref methods into_ref, into_mut, into_slice, and into_slice_mut are unsound
and may allow safe code to exhibit undefined behavior when used with Ref<B, T> where B
is cell::Ref or
cell::RefMut. Note that these
methods remain sound when used with B types other than cell::Ref or cell::RefMut.
See https://github.com/google/zerocopy/issues/716 for a more in-depth analysis.
The current plan is to yank the affected versions soon. See https://github.com/google/zerocopy/issues/679 for more detail.
- Record
RUSTSEC-2023-0074- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
zerocopycrates.io | 0.2.2 up to 0.2.9 | 0.2.9 |
zerocopycrates.io | 0.3.0 up to 0.3.2 | 0.3.2 |
zerocopycrates.io | 0.4.0 to 0.4.0 | 0.4.1 |
zerocopycrates.io | 0.5.0 up to 0.5.2 | 0.5.2 |
zerocopycrates.io | 0.6.0 up to 0.6.6 | 0.6.6 |
zerocopycrates.io | 0.7.0 up to 0.7.31 | 0.7.31 |
zerocopycrates.io | 0.4.0 up to 0.4.1 | 0.4.1 |
zerocopycrates.io | 0.2.2 up to 0.2.9, 0.3.0 up to 0.3.2, 0.4.0 up to 0.4.1, 0.5.0 up to 0.5.2, 0.6.0 up to 0.6.6, 0.7.0 up to 0.7.31 | 0.2.90.3.20.4.10.5.20.6.60.7.31 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-3mv5-343c-w2qg is a vulnerability with no CVSS score yet in zerocopy, published December 14, 2023. No source lists public exploit code. Fixed in zerocopy 0.2.9.
References
github.com/google/zerocopy/security/advisories/GHSA-3mv5-343c-w2qg
rustsec.org/advisories/RUSTSEC-2023-0074.html
crates.io/crates/zerocopy