Add advisory for fourq: OOB pointer arithmetic in Point::from_hash()

[yaokunzhang]

Affected crate(s)

• fourq (14 recent downloads on crates.io)

Links to upstream issue(s) or PR(s)

• UB in Point::from_hash() 982945902/fourq_rust#1

Severity

Undefined behavior via out-of-bounds pointer arithmetic and write. Point::from_hash() is a public safe API that performs unchecked pointer operations on short byte slices, leading to OOB memory writes and aliasing violations. Triggerable from safe code.

Checklist

• Advisory filename starts with RUSTSEC-0000-0000 as the ID
• date field is set to the public disclosure date
• Contains a concise and descriptive title after advisory metadata
• Asked maintainer(s) if publishing an advisory is appropriate

[djc]

No response about whether publishing an advisory is appropriate.