GHSA-67r5-rqwv-9p9q `array-init-cursor` in version 0.2.0 and below is unsound when used with types that implement `Drop`
The array-init-cursor library causes double-free vulnerabilities when used with types implementing Drop, potentially leading to memory corruption or crashes.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Not stated
- Victim action needed
- Not needed
- Fix
- Available
What is GHSA-67r5-rqwv-9p9q?
GHSA-67r5-rqwv-9p9q is an use after free vulnerability in array-init-cursor, published on 27 Mar 2025.
Official description
The Drop implementation will get run twice when using the cursor.
This issue does not affect you, if you are using only using the crate with
types that are Copy such as u8.
This issue also does not affect you, if you are only depending on it through
the crate planus.
Which versions are affected by GHSA-67r5-rqwv-9p9q?
3 open source packages ship an affected version, including array-init-cursor.
| Package | Affected | Fixed in |
|---|---|---|
array-init-cursor crates.io | All versions | 0.2.1 |
array-init-cursor crates.io | All versions | 0.2.1 |
array-init-cursor crates.io | From 0.0.0-0 | 0.2.1 |
How do I fix GHSA-67r5-rqwv-9p9q?
Upgrade array-init-cursor to 0.2.1 or later.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is GHSA-67r5-rqwv-9p9q being exploited?
There is no known exploitation of GHSA-67r5-rqwv-9p9q in the wild and no public exploit code.
Sources
Also known as RUSTSEC-2025-0019.