{"id":"GHSA-p7mj-xvxg-grff","aliases":["RUSTSEC-2021-0152"],"status":"published","title":"`out_reference::Out::from_raw` should be `unsafe`","description":"`Out::from_raw` in affected versions allows writing a value to invalid memory address without requiring `unsafe`.\n\nThe soundness issue has been addressed by making `Out::from_raw` an unsafe function.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2021-01-20T12:00:00Z","modified":"2023-11-08T04:21:31Z","fixes":[{"ecosystem":"crates.io","package":"out-reference","fixed_in":["0.2.0"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"crates.io","package":"out-reference","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.1.0"},{"fixed":"0.2.0"}]}]},{"source":"osv","ecosystem":"crates.io","package":"out-reference","ranges":[{"type":"SEMVER","events":[{"introduced":"0.1.0"},{"fixed":"0.2.0"}]}]},{"source":"osv","ecosystem":"crates.io","package":"out-reference","ranges":[{"type":"SEMVER","events":[{"introduced":"0.1.0"},{"fixed":"0.2.0"}]}]}],"references":[{"url":"https://github.com/RustyYato/out-ref/issues/1","tags":["web","report"]},{"url":"https://rustsec.org/advisories/RUSTSEC-2021-0152.html","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-p7mj-xvxg-grff"},{"url":"https://crates.io/crates/out-reference","tags":["package"]}],"sources":{"ghsa":[{"id":"GHSA-p7mj-xvxg-grff","title":"`out_reference::Out::from_raw` should be `unsafe`","description":"`Out::from_raw` in affected versions allows writing a value to invalid memory address without requiring `unsafe`.\n\nThe soundness issue has been addressed by making `Out::from_raw` an unsafe function.\n","status":"published","published":"2023-03-13T20:49:24Z","modified":"2023-03-13T20:49:28Z","updated_at":"2026-11-02T14:36:48.041653Z"}],"osv":[{"id":"GHSA-p7mj-xvxg-grff","title":"`out_reference::Out::from_raw` should be `unsafe`","description":"`Out::from_raw` in affected versions allows writing a value to invalid memory address without requiring `unsafe`.\n\nThe soundness issue has been addressed by making `Out::from_raw` an unsafe function.\n","status":"published","published":"2023-03-13T20:49:24Z","modified":"2023-11-08T04:21:31.675352Z","updated_at":"2026-11-02T15:46:52.891208Z"},{"id":"RUSTSEC-2021-0152","title":"`out_reference::Out::from_raw` should be `unsafe`","description":"`Out::from_raw` in affected versions allows writing a value to invalid memory address without requiring `unsafe`.\n\nThe soundness issue has been addressed by making `Out::from_raw` an unsafe function.","status":"published","published":"2021-01-20T12:00:00Z","modified":"2023-11-08T04:21:31.675352Z","updated_at":"2026-11-02T15:53:39.492624Z"}]}}