GHSA-pfp7-vxgr-83pw Heap Buffer Overflow in the DrainCol Destructor
An off-by-one error in the DrainCol destructor causes a heap buffer overflow, potentially allowing code execution or crashes in applications using the TooDee library.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Not stated
- Victim action needed
- Not needed
- Fix
- Available
What is GHSA-pfp7-vxgr-83pw?
GHSA-pfp7-vxgr-83pw is a memory corruption vulnerability in toodee, published on 22 May 2025.
Official description
An off-by-one error in the DrainCol::drop destructor could cause an unsafe memory copy
operation to exceed the bounds of the associated vector.
The error was related to the size of the data being copied in one of the ptr::copy
invocations inside the destructor.
When removing the first column from a TooDee object, the DrainCol return object could cause a heap buffer overflow vulnerability when it is dropped.
The issue was fixed in commit e6e16d5 by reducing the copied size by one.
Which versions are affected by GHSA-pfp7-vxgr-83pw?
3 open source packages ship an affected version, including toodee.
| Package | Affected | Fixed in |
|---|---|---|
toodee crates.io | From 0.2.0 | 0.6.0 |
toodee crates.io | From 0.2.0 | 0.6.0 |
toodee crates.io | From 0.2.0 | 0.6.0 |
How do I fix GHSA-pfp7-vxgr-83pw?
Upgrade toodee to 0.6.0 or later.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is GHSA-pfp7-vxgr-83pw being exploited?
There is no known exploitation of GHSA-pfp7-vxgr-83pw in the wild and no public exploit code.
Sources
Also known as RUSTSEC-2025-0062.