RUSTSEC-2023-0081 safemem is unmaintained

Not scored Published 14 Feb 2023

The safemem library is unmaintained and archived, requiring developers to migrate to standard Rust library functions to avoid supply chain risks.

What is RUSTSEC-2023-0081?

RUSTSEC-2023-0081 is a vulnerability in safemem, published on 14 Feb 2023.

Official description

The latest crates.io release was in 2019. The repository has been archived by the author.

safemem::copy_over(slice, src_idx, dest_idx, len); can be replaced with slice.copy_within(src_idx..src_idx+len, dest_idx); as of rust 1.37.0.
safemem::write_bytes(slice, byte); can be replaced with slice.fill(byte); as of rust 1.50.0

safemem::prepend(slice, vec); can be replaced with

let old_len = vec.len();
vec.extend_from_slice(slice);
vec.rotate_left(old_len);

as of rust 1.26.0

1 open source package ship an affected version, including safemem.

Package	Affected	Fixed in
`safemem` crates.io	From `0.0.0-0`	None

No fix has been published for RUSTSEC-2023-0081 yet. Limit exposure of the affected software until one is available.

There is no known exploitation of RUSTSEC-2023-0081 in the wild and no public exploit code.