GHSA-mrrw-grhq-86gf
Ascii (crate) allows out-of-bounds array indexing in safe code
Affected version of this crate had implementation of From<&mut AsciiStr> for &mut [u8] and &mut str. This can result in out-of-bounds array indexing in safe code.
The flaw was corrected in commit 8a6c779 by removing those impls.
What each source reports
GitHub AdvisoriesNo score
Ascii (crate) allows out-of-bounds array indexing in safe code
Affected version of this crate had implementation of From<&mut AsciiStr> for &mut [u8] and &mut str. This can result in out-of-bounds array indexing in safe code.
The flaw was corrected in commit 8a6c779 by removing those impls.
- Record
GHSA-mrrw-grhq-86gf- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVNo score
Ascii (crate) allows out-of-bounds array indexing in safe code
Affected version of this crate had implementation of From<&mut AsciiStr> for &mut [u8] and &mut str. This can result in out-of-bounds array indexing in safe code.
The flaw was corrected in commit 8a6c779 by removing those impls.
- Record
GHSA-mrrw-grhq-86gf- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVRUSTSEC-2023-0015No score
Ascii allows out-of-bounds array indexing in safe code
Affected version of this crate had implementation of From<&mut AsciiStr> for &mut [u8] and &mut str. This can result in out-of-bounds array indexing in safe code.
The flaw was corrected in commit 8a6c779 by removing those impls.
- Record
RUSTSEC-2023-0015- Updated
- 2026-11-02
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-mrrw-grhq-86gf is a vulnerability with no CVSS score yet in ascii, published February 25, 2023. No source lists public exploit code. Fixed in ascii 0.9.3.