-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| memory_pages | rust | <= 0.1.0 |
RustRustMiggo AIRoot Cause AnalysisThe vulnerability lies in the PagedVec::capacity function within the memory_pages crate. When PagedVec is instantiated with a Zero-Sized Type (ZST), the std::mem::size_of::<T>() call within the capacity function returns 0. This results in a division by zero when calculating the capacity (self.data.len() / std::mem::size_of::<T>()). The PagedVec::reserve function calls capacity and is therefore also vulnerable. The issue report and POC code confirm this behavior. Since no patched version or specific commit fixing the issue is available, the analysis is based on the code from version 0.1.0, which is known to be vulnerable.
KEV Misses 88% of Exploited CVEs- Get the report