{"id":"CVE-2020-25796","aliases":["DEBIAN-CVE-2020-25796","EUVD-2021-1706","GHSA-64gv-qg2v-vxv6","GHSA-9p9m-9xww-qjcx","GHSA-fqpx-cq8x-9wp4","GHSA-mp6f-p9gp-vpj9","GHSA-rfgg-vccr-m46m","GHSA-x54v-qxxr-93qc","RUSTSEC-2020-0041","UBUNTU-CVE-2020-25796","USN-8118-1"],"status":"published","title":"Unaligned references in sized-chunks","description":"An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the InlineArray implementation, an unaligned reference may be generated for a type that has a large alignment requirement.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0168,"percentile":0.77095,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-129","CWE-401"],"published":"2020-09-06T12:00:00Z","modified":"2026-10-26T12:02:40Z","fixes":[{"ecosystem":"crates.io","package":"sized-chunks","fixed_in":["0.6.3"],"sources":["ghsa"]},{"ecosystem":"Debian:12","package":"rust-sized-chunks","fixed_in":["0.6.5-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"rust-sized-chunks","fixed_in":["0.6.5-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"rust-sized-chunks","fixed_in":["0.6.5-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"rust-sized-chunks","fixed_in":["0.3.1-1ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"crates.io","package":"sized-chunks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.3"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"rust-sized-chunks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.5-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"rust-sized-chunks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.5-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"rust-sized-chunks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.5-1"}]}]},{"source":"osv","ecosystem":"crates.io","package":"sized-chunks","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.6.3"}]}],"bundled":6},{"source":"osv","ecosystem":"crates.io","package":"sized-chunks","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.6.3"}]}],"bundled":6},{"source":"osv","ecosystem":"crates.io","package":"sized-chunks","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.6.3"}]}],"bundled":6},{"source":"osv","ecosystem":"crates.io","package":"sized-chunks","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.6.3"}]}],"bundled":6},{"source":"osv","ecosystem":"crates.io","package":"sized-chunks","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.6.3"}]}],"bundled":6},{"source":"osv","ecosystem":"crates.io","package":"sized-chunks","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.6.3"}]}],"bundled":6},{"source":"osv","ecosystem":"crates.io","package":"sized-chunks","ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"0.6.3"}]}],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"rust-sized-chunks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.1-1ubuntu0.1~esm1"}]}],"versions":["0.3.1-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"rust-sized-chunks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.1-1ubuntu0.1~esm1"}]}],"versions":["0.3.1-1"],"bundled":5}],"products":[{"vendor":"sized-chunks_project","product":"sized-chunks"}],"references":[{"url":"https://rustsec.org/advisories/RUSTSEC-2020-0041.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web","report"]},{"url":"https://github.com/bodil/sized-chunks/issues/11","tags":["x_refsource_MISC","x_transferred","Exploit","Patch","Third Party Advisory","fix","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25796","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-fqpx-cq8x-9wp4"},{"url":"https://github.com/bodil/sized-chunks/commit/3ae48bd463c1af41c24b96b84079946f51f51e3c","tags":["fix","web"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-25796","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25793","tags":["advisory"]},{"url":"https://github.com/bodil/sized-chunks","tags":["package"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25791","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25792","tags":["advisory"]},{"url":"https://github.com/bodil/sized-chunks/commit/99e593c3037438db478256a1f3101371a69cbd3f","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25794","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25795","tags":["advisory"]},{"url":"https://crates.io/crates/sized-chunks","tags":["package"]},{"url":"https://ubuntu.com/security/CVE-2020-25796","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-25796","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8118-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-25791","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25792","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25793","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25794","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2020-25796","description":"An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the InlineArray implementation, an unaligned reference may be generated for a type that has a large alignment requirement.","status":"published","published":"2020-09-19T20:58:27Z","modified":"2024-08-04T15:40:36.982Z","updated_at":"2026-11-02T14:35:48.52216Z"}],"euvd":[{"id":"EUVD-2021-1706","description":"An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the InlineArray implementation, an unaligned reference may be generated for a type that has a large alignment requirement.","status":"published","published":"2020-09-19T20:58:27Z","modified":"2024-08-04T15:40:36Z","updated_at":"2026-11-03T03:07:16.74035Z"}],"ghsa":[{"id":"GHSA-fqpx-cq8x-9wp4","title":"Unaligned references in sized-chunks","description":"An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the InlineArray implementation, an unaligned reference may be generated for a type that has a large alignment requirement.","status":"published","published":"2021-08-25T20:46:03Z","modified":"2023-01-11T05:06:01Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-129"],"updated_at":"2026-11-02T14:36:12.361159Z"}],"nvd":[{"id":"CVE-2020-25796","description":"An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the InlineArray implementation, an unaligned reference may be generated for a type that has a large alignment requirement.","status":"published","published":"2020-09-19T21:15:12.5Z","modified":"2026-06-17T03:07:19.297Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-129"],"updated_at":"2026-11-02T14:06:15.83396Z"}],"osv":[{"id":"CVE-2020-25791","description":"An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is not checked when constructed with unit().","status":"published","published":"2020-09-19T21:15:12.203Z","modified":"2026-10-20T10:52:54.560895802Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:15.879068Z"},{"id":"CVE-2020-25792","description":"An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is not checked when constructed with pair().","status":"published","published":"2020-09-19T21:15:12.267Z","modified":"2026-10-20T10:52:54.561189529Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:15.879068Z"},{"id":"CVE-2020-25793","description":"An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is not checked when constructed with From\u003cInlineArray\u003cA, T\u003e\u003e.","status":"published","published":"2020-09-19T21:15:12.33Z","modified":"2026-10-20T10:52:54.97260394Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:15.879068Z"},{"id":"CVE-2020-25794","description":"An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, clone can have a memory-safety issue upon a panic.","status":"published","published":"2020-09-19T21:15:12.39Z","modified":"2026-10-20T10:52:54.560962557Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:15.879068Z"},{"id":"CVE-2020-25795","description":"An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, insert_from can have a memory-safety issue upon a panic.","status":"published","published":"2020-09-19T21:15:12.437Z","modified":"2026-10-20T10:52:54.560277626Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:15.879068Z"},{"id":"CVE-2020-25796","description":"An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the InlineArray implementation, an unaligned reference may be generated for a type that has a large alignment requirement.","status":"published","published":"2020-09-19T21:15:12.5Z","modified":"2026-10-20T10:52:54.560921873Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:15.879068Z"},{"id":"DEBIAN-CVE-2020-25796","description":"An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the InlineArray implementation, an unaligned reference may be generated for a type that has a large alignment requirement.","status":"published","published":"2020-09-19T21:15:12.5Z","modified":"2026-10-26T12:02:40.794630491Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:33.729655Z"},{"id":"GHSA-64gv-qg2v-vxv6","title":"Array size is not checked in sized-chunks","description":"An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is not checked when constructed with From\u003cInlineArray\u003cA, T\u003e\u003e.","status":"published","published":"2021-08-25T20:45:04Z","modified":"2024-03-15T00:05:17.938691Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-129"],"updated_at":"2026-11-02T15:46:39.266402Z"},{"id":"GHSA-9p9m-9xww-qjcx","title":"Array size is not checked in sized-chunks","description":"An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is not checked when constructed with unit().","status":"published","published":"2021-08-25T20:45:06Z","modified":"2024-03-15T00:05:17.938691Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-129"],"updated_at":"2026-11-02T15:46:43.875515Z"},{"id":"GHSA-fqpx-cq8x-9wp4","title":"Unaligned references in sized-chunks","description":"An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the InlineArray implementation, an unaligned reference may be generated for a type that has a large alignment requirement.","status":"published","published":"2021-08-25T20:46:03Z","modified":"2024-03-15T00:05:17.938691Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-129"],"updated_at":"2026-11-02T15:46:46.760785Z"},{"id":"GHSA-mp6f-p9gp-vpj9","title":"Array size is not checked in sized-chunks","description":"An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is not checked when constructed with pair().","status":"published","published":"2021-08-25T20:46:06Z","modified":"2024-04-22T18:52:15Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-129"],"updated_at":"2026-11-02T15:46:52.170928Z"},{"id":"GHSA-rfgg-vccr-m46m","title":"Missing release of memory in sized-chunks","description":"An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, clone can have a memory-safety issue upon a panic.","status":"published","published":"2021-08-25T20:45:58Z","modified":"2024-03-15T00:05:17.938691Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-401"],"updated_at":"2026-11-02T15:46:55.877614Z"},{"id":"GHSA-x54v-qxxr-93qc","title":"Missing release of memory in sized-chunks","description":"Chunk:\n\n* Array size is not checked when constructed with unit() and pair().\n* Array size is not checked when constructed with From\u003cInlineArray\u003cA, T\u003e\u003e.\n* Clone and insert_from are not panic-safe; A panicking iterator causes memory safety issues with them.\n\nInlineArray:\n\n* Generates unaligned references for types with a large alignment requirement.\n","status":"published","published":"2021-08-25T20:45:01Z","modified":"2024-03-15T00:05:17.938691Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-401"],"updated_at":"2026-11-02T15:46:59.484835Z"},{"id":"RUSTSEC-2020-0041","title":"Multiple soundness issues in Chunk and InlineArray","description":"Chunk:\n\n* Array size is not checked when constructed with `unit()` and `pair()`.\n* Array size is not checked when constructed with `From\u003cInlineArray\u003cA, T\u003e\u003e`.\n* `Clone` and `insert_from` are not panic-safe; A panicking iterator causes memory safety issues with them.\n\nInlineArray:\n\n* Generates unaligned references for types with a large alignment requirement.","status":"published","published":"2020-09-06T12:00:00Z","modified":"2024-03-15T00:05:17.938691Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:39.492624Z"},{"id":"UBUNTU-CVE-2020-25796","description":"An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the InlineArray implementation, an unaligned reference may be generated for a type that has a large alignment requirement.","status":"published","published":"2020-09-19T21:15:00Z","modified":"2026-03-24T10:53:01.783095Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:23.905183Z"},{"id":"USN-8118-1","title":"rust-sized-chunks vulnerabilities","description":"Yechan Bae discovered that sized-chunks did not properly validate array\nsize when constructing Chunk. An attacker could possibly use these\nissues to cause out-of-bounds access, leading to memory corruption or\nundefined behavior. (CVE-2020-25791, CVE-2020-25792, CVE-2020-25793)\n\nYechan Bae discovered that sized-chunks had a memory safety issue in the\nclone implementation when a panic occurs. An attacker could possibly use\nthis issue to cause improper memory handling, leading to memory\ncorruption or a denial of service. (CVE-2020-25794)\n\nYechan Bae discovered that sized-chunks could create unaligned\nreferences in the InlineArray implementation for types with strict\nalignment requirements. An attacker could possibly use this issue to\ncause undefined behavior, leading to memory corruption or a denial of\nservice. (CVE-2020-25796)","status":"published","published":"2026-03-23T16:35:52Z","modified":"2026-03-24T11:02:10.630197Z","updated_at":"2026-11-02T16:58:22.951676Z"}]}}