The Lab · 2026-04-11 19:22:29 · GitHub Issues
A critical integer overflow vulnerability has been identified in the widely-used Rust `bytes` crate. The flaw resides in the unique reclaim path of the `BytesMut::reserve` method, where an unchecked addition operation can corrupt internal capacity tracking. Specifically, the condition `if v_capacity >= new_cap + offset...
The Lab · 2026-04-14 01:22:35 · GitHub Issues
A critical soundness vulnerability in the widely used Rust `rand` library has been patched in version 0.10.1. The flaw, tracked as GHSA-cq8v-f236-94qc, is a library unsoundness issue, meaning safe Rust code using the public API could trigger undefined behavior (UB). This type of vulnerability is particularly severe in ...
The Lab · 2026-04-14 05:22:35 · GitHub Issues
A critical security vulnerability has been disclosed in the widely used Rust crate `rand`, revealing an unsoundness that can lead to undefined behavior in safe Rust code. The flaw, tracked as GHSA-cq8v-f236-94qc, is triggered under a specific but plausible configuration: when the crate's `log` and `thread_rng` features...