GHSA-h588-76vg-prgj
`DecimalArray` does not perform bound checks on accessing values and offsets
DecimalArray performs insufficient bounds checks, which allows out-of-bounds reads in safe code if the lenght of the backing buffer is not a multiple of 16.
What each source reports
GitHub AdvisoriesNo score
`DecimalArray` does not perform bound checks on accessing values and offsets
DecimalArray performs insufficient bounds checks, which allows out-of-bounds reads in safe code if the lenght of the backing buffer is not a multiple of 16.
- Record
GHSA-h588-76vg-prgj- Updated
- 2026-11-02
OSVNo score
`DecimalArray` does not perform bound checks on accessing values and offsets
DecimalArray performs insufficient bounds checks, which allows out-of-bounds reads in safe code if the lenght of the backing buffer is not a multiple of 16.
- Record
GHSA-h588-76vg-prgj- Updated
- 2026-11-02
OSVRUSTSEC-2021-0117No score
`DecimalArray` does not perform bound checks on accessing values and offsets
DecimalArray performs insufficient bounds checks,
which allows out-of-bounds reads in safe code
if the length of the backing buffer is not a multiple of 16.
- Record
RUSTSEC-2021-0117- Updated
- 2026-11-02
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-h588-76vg-prgj is a vulnerability with no CVSS score yet in arrow, published September 14, 2021. No source lists public exploit code. Fixed in arrow 6.4.0.