Rust advisories / rtvm-interpreter
Unsound LowRUSTSEC-2025-0131 · rtvm-interpreter
RUSTSEC-2025-0131: Lack of sufficient checks in public API
Short answerrtvm-interpreter has an API that can cause undefined behaviour from safe code: Lack of sufficient checks in public API. No fixed version yet.
| Crate | rtvm-interpreter |
|---|---|
| Type | Unsound (memory-corruption) |
| Affected versions | Every version. |
| Fixed in | none |
| Severity | Low (GitHub rating) |
| Published | 2025-10-31 |
| Last changed | 2025-12-02 |
| Also known as | GHSA-pq5v-rwp8-p7gm |
| Affected functions | rtvm_interpreter::Interpreter::program_counter |
What to do
- Find who pulls it in:
cargo tree -i rtvm-interpreter. - Avoid the affected API (
rtvm_interpreter::Interpreter::program_counter), or replace the crate.
Details from the advisory
The affected function is unsound due to insufficient checks on public struct field.
References
- Package: crates.io/crates/rtvm-interpreter
- Advisory: rustsec.org/advisories/RUSTSEC-2025-0131.html
- Package: crates.io/crates/rtvm-interpreter/4.0.0
- Web: docs.rs/rtvm-interpreter/latest/src/rtvm_interpreter/interpreter.rs.html
From the RustSec Advisory Database (CC0-1.0) via the OSV export, downloaded Oct 24, 2026. Severity score computed from the published CVSS vector.
Up next
Are you affected?Check your whole dependency treePaste Cargo.lock: every advisory, for your exact versions.Read it next →Also worth your time
Did this answer your question?