{"id":"GHSA-mrrw-grhq-86gf","aliases":["RUSTSEC-2023-0015"],"status":"published","title":"Ascii (crate) allows out-of-bounds array indexing in safe code","description":"Affected version of this crate had implementation of `From\u003c\u0026mut AsciiStr\u003e` for `\u0026mut [u8]` and `\u0026mut str`. This can result in out-of-bounds array indexing in safe code.\n\nThe flaw was corrected in commit [8a6c779](https://github.com/tomprogrammer/rust-ascii/pull/63/commits/8a6c7798c202766bd57d70fb8d12739dd68fb9dc) by removing those impls.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2023-02-25T12:00:00Z","modified":"2026-07-16T19:00:21Z","fixes":[{"ecosystem":"crates.io","package":"ascii","fixed_in":["0.9.3"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"crates.io","package":"ascii","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.7.0"},{"fixed":"0.9.3"}]}]},{"source":"osv","ecosystem":"crates.io","package":"ascii","ranges":[{"type":"SEMVER","events":[{"introduced":"0.7.0"},{"fixed":"0.9.3"}]}]},{"source":"osv","ecosystem":"crates.io","package":"ascii","ranges":[{"type":"SEMVER","events":[{"introduced":"0.6.1-0"},{"fixed":"0.9.3"}]}]}],"references":[{"url":"https://github.com/tomprogrammer/rust-ascii/issues/64","tags":["web","report"]},{"url":"https://github.com/tomprogrammer/rust-ascii/pull/63/commits/8a6c7798c202766bd57d70fb8d12739dd68fb9dc","tags":["web"]},{"url":"https://rustsec.org/advisories/RUSTSEC-2023-0015.html","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-mrrw-grhq-86gf"},{"url":"https://github.com/tomprogrammer/rust-ascii","tags":["package"]},{"url":"https://crates.io/crates/ascii","tags":["package"]}],"sources":{"ghsa":[{"id":"GHSA-mrrw-grhq-86gf","title":"Ascii (crate) allows out-of-bounds array indexing in safe code","description":"Affected version of this crate had implementation of `From\u003c\u0026mut AsciiStr\u003e` for `\u0026mut [u8]` and `\u0026mut str`. This can result in out-of-bounds array indexing in safe code.\n\nThe flaw was corrected in commit [8a6c779](https://github.com/tomprogrammer/rust-ascii/pull/63/commits/8a6c7798c202766bd57d70fb8d12739dd68fb9dc) by removing those impls.","status":"published","published":"2023-02-28T20:30:10Z","modified":"2026-07-16T18:56:58Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:40:44.915484Z"}],"osv":[{"id":"GHSA-mrrw-grhq-86gf","title":"Ascii (crate) allows out-of-bounds array indexing in safe code","description":"Affected version of this crate had implementation of `From\u003c\u0026mut AsciiStr\u003e` for `\u0026mut [u8]` and `\u0026mut str`. This can result in out-of-bounds array indexing in safe code.\n\nThe flaw was corrected in commit [8a6c779](https://github.com/tomprogrammer/rust-ascii/pull/63/commits/8a6c7798c202766bd57d70fb8d12739dd68fb9dc) by removing those impls.","status":"published","published":"2023-02-28T20:30:10Z","modified":"2026-07-16T19:00:21.951703667Z","cwes":["CWE-119"],"updated_at":"2026-11-02T15:46:52.170928Z"},{"id":"RUSTSEC-2023-0015","title":"Ascii allows out-of-bounds array indexing in safe code","description":"Affected version of this crate had implementation of `From\u003c\u0026mut AsciiStr\u003e` for `\u0026mut [u8]` and `\u0026mut str`. This can result in out-of-bounds array indexing in safe code.\n\nThe flaw was corrected in commit [8a6c779](https://github.com/tomprogrammer/rust-ascii/pull/63/commits/8a6c7798c202766bd57d70fb8d12739dd68fb9dc) by removing those impls.","status":"published","published":"2023-02-25T12:00:00Z","modified":"2023-11-08T04:21:16.691544Z","updated_at":"2026-11-02T15:53:39.971022Z"}]}}