{"id":"GHSA-g753-ghr7-q33w","aliases":["RUSTSEC-2023-0046"],"status":"published","title":"cyfs-base vulnerable to misaligned pointer dereference in `ChunkId::new`","description":"The function `ChunkId::new` creates a misaligned pointer by casting mutable pointer of `u8` slice which has alignment 1 to the mutable pointer of `u32` which has alignment 4, and dereference the misaligned pointer leading UB, which should not be allowed in safe function.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2023-06-15T12:00:00Z","modified":"2023-11-08T04:19:22Z","affected":[{"source":"ghsa","ecosystem":"crates.io","package":"cyfs-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.6.12"}]}]},{"source":"osv","ecosystem":"crates.io","package":"cyfs-base","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"0.6.12"}]}]},{"source":"osv","ecosystem":"crates.io","package":"cyfs-base","ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"}]}]}],"references":[{"url":"https://github.com/buckyos/CYFS/issues/275","tags":["web","report"]},{"url":"https://github.com/buckyos/CYFS/commit/e030188895096fd8d91d48753877729f4d37dd24","tags":["web"]},{"url":"https://rustsec.org/advisories/RUSTSEC-2023-0046.html","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-g753-ghr7-q33w"},{"url":"https://github.com/buckyos/CYFS","tags":["package"]},{"url":"https://crates.io/crates/cyfs-base","tags":["package"]}],"sources":{"ghsa":[{"id":"GHSA-g753-ghr7-q33w","title":"cyfs-base vulnerable to misaligned pointer dereference in `ChunkId::new`","description":"The function `ChunkId::new` creates a misaligned pointer by casting mutable pointer of `u8` slice which has alignment 1 to the mutable pointer of `u32` which has alignment 4, and dereference the misaligned pointer leading UB, which should not be allowed in safe function.\n","status":"published","published":"2023-06-22T20:01:55Z","modified":"2023-06-22T20:01:57Z","updated_at":"2026-11-02T14:36:55.184601Z"}],"osv":[{"id":"GHSA-g753-ghr7-q33w","title":"cyfs-base vulnerable to misaligned pointer dereference in `ChunkId::new`","description":"The function `ChunkId::new` creates a misaligned pointer by casting mutable pointer of `u8` slice which has alignment 1 to the mutable pointer of `u32` which has alignment 4, and dereference the misaligned pointer leading UB, which should not be allowed in safe function.\n","status":"published","published":"2023-06-22T20:01:55Z","modified":"2023-11-08T04:19:22.223054Z","updated_at":"2026-11-02T15:46:47.472172Z"},{"id":"RUSTSEC-2023-0046","title":"Misaligned pointer dereference in `ChunkId::new`","description":"The function `ChunkId::new` creates a misaligned pointer by casting mutable pointer of `u8` slice which has alignment 1 to the mutable pointer of `u32` which has alignment 4, and dereference the misaligned pointer leading UB, which should not be allowed in safe function.","status":"published","published":"2023-06-15T12:00:00Z","modified":"2023-11-08T04:19:22.223054Z","updated_at":"2026-11-02T15:53:39.971022Z"}]}}