4.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-p444-p2rm-hvrw

GHSA-p444-p2rm-hvrw: Duplicate Advisory: transpose: Buffer overflow due to integer overflow

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-5gmm-6m36-r7jh. This link is maintained to preserve external references.

Original Description

The transpose crate before 0.2.3 for Rust allows an integer overflow via input_width and input_height arguments.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-p444-p2rm-hvrw

GHSA-p444-p2rm-hvrw:

4.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
transpose	rust	>= 0.1.0, < 0.2.3	0.2.3

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in an integer overflow when calculating the total size of the input buffer. The transpose crate uses multiplication of width and height to assert that the provided buffer has the correct size. However, this multiplication can overflow for large width and height values, resulting in a value that is smaller than the actual required buffer size, yet still passes the assertion check if the provided buffer length is also small. This leads to a buffer overflow when the functions proceed to access elements assuming a larger matrix size.

The patch addresses this by replacing the direct multiplication (*) with checked_mul, which returns None if an overflow occurs. The assertions are updated to check for the correct result of this safe multiplication, thus preventing the overflow and the resulting buffer overflow. The analysis of the commit c4bcd39fabca9a31a401d0cc42d4090869b5a37a clearly shows these changes in the transpose and transpose_inplace functions, confirming them as the vulnerable functions.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.