-
CVSS Score
-All listed functions use the core vulnerable pattern: 1) Manual allocation with alignment > T's alignment, 2) Construction of standard containers (Vec/Box) via from_raw_parts, 3) Subsequent deallocation using container's type alignment instead of original allocation alignment. The MIRI error demonstrates this mismatch explicitly, and the advisory confirms these functions as affected entry points. The fundamental violation of GlobalAlloc's layout matching requirement makes all these variants inherently vulnerable.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| maligned | rust | <= 0.2.1 |
A Semantic Attack on Google Gemini - Read the Latest Research