{"id":"GHSA-r7cj-wmwv-hfw5","aliases":["RUSTSEC-2021-0116"],"status":"published","title":"`BinaryArray` does not perform bound checks on reading values and offsets","description":"`BinaryArray` performs insufficient validation on creation, which allows out-of-bounds reads in safe code.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2021-09-14T12:00:00Z","modified":"2023-11-08T04:22:37Z","fixes":[{"ecosystem":"crates.io","package":"arrow","fixed_in":["6.4.0"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"crates.io","package":"arrow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0"}]}]},{"source":"osv","ecosystem":"crates.io","package":"arrow","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.4.0"}]}]},{"source":"osv","ecosystem":"crates.io","package":"arrow","ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"6.4.0"}]}]}],"references":[{"url":"https://github.com/apache/arrow-rs/blob/6.4.0/CHANGELOG.md#640-2021-12-10","tags":["web"]},{"url":"https://rustsec.org/advisories/RUSTSEC-2021-0116.html","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-r7cj-wmwv-hfw5"},{"url":"https://github.com/apache/arrow-rs","tags":["package"]},{"url":"https://crates.io/crates/arrow","tags":["package"]},{"url":"https://github.com/apache/arrow-rs/issues/772","tags":["report"]},{"url":"https://github.com/apache/arrow-rs/issues/773","tags":["report"]}],"sources":{"ghsa":[{"id":"GHSA-r7cj-wmwv-hfw5","title":"`BinaryArray` does not perform bound checks on reading values and offsets","description":"`BinaryArray` performs insufficient validation on creation, which allows out-of-bounds reads in safe code.\n","status":"published","published":"2022-06-16T23:40:50Z","modified":"2023-01-12T05:00:57Z","updated_at":"2026-11-02T14:36:13.23016Z"}],"osv":[{"id":"GHSA-r7cj-wmwv-hfw5","title":"`BinaryArray` does not perform bound checks on reading values and offsets","description":"`BinaryArray` performs insufficient validation on creation, which allows out-of-bounds reads in safe code.\n","status":"published","published":"2022-06-16T23:40:50Z","modified":"2023-11-08T04:22:37.632268Z","updated_at":"2026-11-02T15:46:55.480549Z"},{"id":"RUSTSEC-2021-0116","title":"`BinaryArray` does not perform bound checks on reading values and offsets","description":"`BinaryArray` performs insufficient validation on creation, which allows out-of-bounds reads in safe code.","status":"published","published":"2021-09-14T12:00:00Z","modified":"2023-11-08T04:22:37.632268Z","updated_at":"2026-11-02T15:53:39.492624Z"}]}}