-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from unsafe pointer casting in the post_exec method of HitcountsMapObserver. The original code (line 1246 in map.rs) used core::slice::from_raw_parts_mut with a direct u8->u16 cast without alignment checks. The patch adds align_offset to ensure 2-byte alignment for u16 operations, confirming this was the vulnerable location. The GitHub issue #1526 and commit diff both specifically reference this function as the source of unsoundness.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| libafl | rust | < 0.11.2 | 0.11.2 |