{"id":"GHSA-58xc-hpvq-8473","aliases":["RUSTSEC-2025-0032"],"status":"published","title":"Redox UEFI Safe API can cause heap-buffer-overflow","description":"ffi::nstr() should be marked unsafe, since a pointer to a buffer without a trailing 0 value will cause a heap buffer overflow.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122"],"published":"2025-03-27T12:00:00Z","modified":"2025-10-28T06:29:23Z","fixes":[{"ecosystem":"crates.io","package":"redox_uefi_std","fixed_in":["0.1.14"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"crates.io","package":"redox_uefi_std","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.1.8"},{"fixed":"0.1.14"}]}]},{"source":"osv","ecosystem":"crates.io","package":"redox_uefi_std","ranges":[{"type":"SEMVER","events":[{"introduced":"0.1.8"},{"fixed":"0.1.14"}]}]},{"source":"osv","ecosystem":"crates.io","package":"redox_uefi_std","ranges":[{"type":"SEMVER","events":[{"introduced":"0.1.8"},{"fixed":"0.1.14"}]}]}],"references":[{"url":"https://gitlab.redox-os.org/redox-os/uefi/-/commit/b711d47e815665b0ec8949e39292ad8e3fdd0756","tags":["web"]},{"url":"https://rustsec.org/advisories/RUSTSEC-2025-0032.html","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-58xc-hpvq-8473"},{"url":"https://gitlab.redox-os.org/redox-os/uefi","tags":["package"]},{"url":"https://crates.io/crates/redox_uefi_std","tags":["package"]}],"sources":{"ghsa":[{"id":"GHSA-58xc-hpvq-8473","title":"Redox UEFI Safe API can cause heap-buffer-overflow","description":"ffi::nstr() should be marked unsafe, since a pointer to a buffer without a trailing 0 value will cause a heap buffer overflow.","status":"published","published":"2025-05-06T20:00:17Z","modified":"2025-05-06T20:00:19Z","cwes":["CWE-122"],"updated_at":"2026-11-02T14:38:42.263728Z"}],"osv":[{"id":"GHSA-58xc-hpvq-8473","title":"Redox UEFI Safe API can cause heap-buffer-overflow","description":"ffi::nstr() should be marked unsafe, since a pointer to a buffer without a trailing 0 value will cause a heap buffer overflow.","status":"published","published":"2025-05-06T20:00:17Z","modified":"2025-10-28T06:29:23.114976Z","cwes":["CWE-122"],"updated_at":"2026-11-02T15:46:38.213481Z"},{"id":"RUSTSEC-2025-0032","title":"Safe API can cause heap-buffer-overflow","description":"ffi::nstr() should be marked unsafe, since a pointer to a buffer without a trailing 0 value will cause a heap buffer overflow.","status":"published","published":"2025-03-27T12:00:00Z","modified":"2025-10-28T06:29:23.114976Z","updated_at":"2026-11-02T15:53:39.971022Z"}]}}