CVE-2020-25791 is a high-severity vulnerability affecting the sized-chunks Rust crate through version 0.6.2, where the Chunk implementation fails to validate array sizes during construction with unit(). This oversight could lead to a denial of service (DoS) due to an array overflow. While the vulnerability has a CVSS score of 7.5, indicating a high potential impact, there is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 0.6.2CPE matchmatch criteria | cpe:2.3:a:sized-chunks_project:sized-chunks:*:*:*:*:*:rust:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
sized-chunks vulnerabilities
Mar 23, 2026Array size is not checked in sized-chunks
Aug 25, 2021An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation the array size is not checked when constructed with unit().
Sep 8, 2020