The advisory explicitly lists these three functions in its [affected.functions] section. The vulnerability stems from improper use of std::slice::from_raw_parts_mut to create u32 slices from arbitrary u8 input without ensuring 4-byte alignment, violating Rust's safety contracts. The Chacha20 methods depend on xor_si512_inplace which contains the core unsafe operation. GitHub issue #27 confirms the alignment violation in xor_si512_inplace, and the CWE-119 classification matches the memory safety violation pattern.