Every CVESearch/Get API key

GHSA-r7cj-wmwv-hfw5

`BinaryArray` does not perform bound checks on reading values and offsets

No scoreFix available

GHSA-r7cj-wmwv-hfw5 is a vulnerability with no CVSS score yet in arrow, published September 14, 2021. No source lists public exploit code. Fixed in arrow 6.4.0.

What does this mean?
Severity
UnratedNo CVSS score yet
Exploit chance
UnscoredNo EPSS score yet
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
6.4.0arrow +1 more

Description

BinaryArray performs insufficient validation on creation, which allows out-of-bounds reads in safe code.

Affected packages

Affected packages
PackageAffectedFixed
arrow
crates.io
before 6.4.0
6.4.0
arrow
crates.io
0.0.0-0 up to 6.4.0
6.4.0

What each source reports

GitHub AdvisoriesNo score

`BinaryArray` does not perform bound checks on reading values and offsets

BinaryArray performs insufficient validation on creation, which allows out-of-bounds reads in safe code.

Record
GHSA-r7cj-wmwv-hfw5
Updated
2026-11-02
OSVNo score

`BinaryArray` does not perform bound checks on reading values and offsets

BinaryArray performs insufficient validation on creation, which allows out-of-bounds reads in safe code.

Record
GHSA-r7cj-wmwv-hfw5
Updated
2026-11-02
OSVRUSTSEC-2021-0116No score

`BinaryArray` does not perform bound checks on reading values and offsets

BinaryArray performs insufficient validation on creation, which allows out-of-bounds reads in safe code.

Record
RUSTSEC-2021-0116
Updated
2026-11-02

History

History
RecordedChangedSources
first indexedGitHub Advisories, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open