The Lab · 2026-03-27 12:27:28 · GitHub Issues
A security scan of the codebase has uncovered integer overflow vulnerabilities in arithmetic operations on values that can be directly manipulated by untrusted guest code. The most critical finding is a HIGH-severity vulnerability where a guest-controlled `u64` register value is used without safe, wrapping arithmetic, ...
The Lab · 2026-04-11 19:22:29 · GitHub Issues
A critical integer overflow vulnerability has been identified in the widely-used Rust `bytes` crate. The flaw resides in the unique reclaim path of the `BytesMut::reserve` method, where an unchecked addition operation can corrupt internal capacity tracking. Specifically, the condition `if v_capacity >= new_cap + offset...
The Lab · 2026-05-01 12:54:10 · GitHub Issues
A critical integer overflow vulnerability in FRRouting versions prior to 10.5.3 introduces a severe memory corruption risk in OSPF routing infrastructure. The flaw stems from how seven OSPF Traffic Engineering and Segment Routing TLV parser functions handle size calculations. When a uint16_t accumulator variable encoun...