Skip to content

Add advisory for aeron: OOB memory access in atomic_buffer()#2866

Open
yaokunzhang wants to merge 1 commit into
rustsec:mainfrom
yaokunzhang:advisory-aeron
Open

Add advisory for aeron: OOB memory access in atomic_buffer()#2866
yaokunzhang wants to merge 1 commit into
rustsec:mainfrom
yaokunzhang:advisory-aeron

Conversation

@yaokunzhang
Copy link
Copy Markdown
Contributor

Affected crate(s)

  • aeron (434 recent downloads on crates.io)

Links to upstream issue(s) or PR(s)

Severity

Out-of-bounds memory access / segfault. MemoryMappedFile::atomic_buffer() performs unchecked pointer arithmetic without validating that offset + length fits within the mapped file size. Triggerable from safe code.

Checklist

  • Advisory filename starts with RUSTSEC-0000-0000 as the ID
  • date field is set to the public disclosure date
  • Contains a concise and descriptive title after advisory metadata
  • Asked maintainer(s) if publishing an advisory is appropriate

@djc
Copy link
Copy Markdown
Member

djc commented May 13, 2026

No response to question if RustSec advisory is appropriate.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants