CVE-2020-35877: Out of bounds read in Ozone
9.8
CVSS Score
3.1
Basic Information
CVE ID
GHSA ID
EPSS Score
0.61972%
CWE
Published
8/25/2021
Updated
6/13/2023
KEV Status
No
Technology
Rust
RustTechnical Details
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| ozone | rust | <= 0.1.0 |
Vulnerability Intelligence
Miggo AI
Miggo AIRoot Cause Analysis
The RustSec advisory explicitly references two code locations:
- src/buffer.rs lines 38-48 shows buffer offset calculation without proper bounds checking
- src/map.rs lines 94-101 demonstrates unsafe handling of uninitialized memory during drop Both patterns directly violate memory safety principles and match the CWE-119 description of improper memory buffer operations. The buffer access in particular aligns with the CVE's specific out-of-bounds read description, while the map drop issue represents a related memory safety violation.