Rust advisories / sized-chunks
Vulnerability HighRUSTSEC-2020-0041 · sized-chunks
RUSTSEC-2020-0041: Multiple soundness issues in Chunk and InlineArray
Short answerA security vulnerability in the sized-chunks crate: Multiple soundness issues in Chunk and InlineArray. High severity (CVSS 7.5). Fixed in 0.6.3: update to a fixed version.
| Crate | sized-chunks |
|---|---|
| Type | Vulnerability |
| Affected versions | Before 0.6.3. |
| Fixed in | 0.6.3 |
| Severity | High, CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| Published | 2020-09-06 |
| Last changed | 2024-03-15 |
| Also known as | CVE-2020-25791, CVE-2020-25792, CVE-2020-25793, CVE-2020-25794, CVE-2020-25795, CVE-2020-25796, GHSA-64gv-qg2v-vxv6, GHSA-9p9m-9xww-qjcx, GHSA-fqpx-cq8x-9wp4, GHSA-mp6f-p9gp-vpj9, GHSA-rfgg-vccr-m46m, GHSA-x54v-qxxr-93qc |
What to do
- See which version you have:
cargo tree -i sized-chunks(it also shows which of your dependencies pulls it in). - Update within your version requirement:
cargo update -p sized-chunks. If the fix is a newer major or minor than your requirement allows, raise it in Cargo.toml (for examplesized-chunks = "0.6.3") or update the dependency that pulls it in. - Check again with
cargo audit, or paste your Cargo.lock into our Cargo.toml checker.
Details from the advisory
Chunk:
- Array size is not checked when constructed with
unit()andpair(). - Array size is not checked when constructed with
From<InlineArray<A, T>>. Cloneandinsert_fromare not panic-safe; A panicking iterator causes memory safety issues with them.
InlineArray:
- Generates unaligned references for types with a large alignment requirement.
References
- Package: crates.io/crates/sized-chunks
- Advisory: rustsec.org/advisories/RUSTSEC-2020-0041.html
- Report: github.com/bodil/sized-chunks/issues/11
From the RustSec Advisory Database (CC0-1.0) via the OSV export, downloaded Oct 24, 2026. Severity score computed from the published CVSS vector.
Other advisories for sized-chunks
Up next
Same cratesized-chunks: security historyEvery advisory for this crate, and whether it is safe to use today.Read it next →Did this answer your question?