CVE-2020-25793 is a high-severity vulnerability (CVSS 7.5) affecting the sized-chunks crate for Rust, specifically versions through 0.6.2. The flaw lies in the Chunk implementation, where array sizes are not properly validated when constructed from InlineArray, leading to a potential denial of service. While no active exploitation, public exploit code, or significant community discussion has been observed, the vulnerability could be exploited remotely with low attack complexity to cause system unavailability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 0.6.2CPE matchmatch criteria | cpe:2.3:a:sized-chunks_project:sized-chunks:*:*:*:*:*:rust:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
sized-chunks vulnerabilities
Mar 23, 2026Array size is not checked in sized-chunks
Aug 25, 2021An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation the array size is not checked when constructed with From<InlineArray<A T>>.
Sep 8, 2020