CVE-2023-41051 is an out-of-bounds memory access vulnerability in the vm-memory Rust crate, affecting custom implementations of the VolatileMemory trait. It occurs when the get_slice function returns a VolatileSlice shorter than expected, potentially leading to denial of service. With a CVSS score of 4.7 (Medium), exploitation requires local access and high attack complexity, resulting in a high impact on availability but no confidentiality or integrity compromise. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 0.1.0, < 0.12.2CPE matchmatch criteria | cpe:2.3:a:vm-memory_project:vm-memory:*:*:*:*:*:rust:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.0 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
CVE-2023-41051
Jun 11, 2024Default functions in VolatileMemory trait lack bounds checks in vm-memory
Sep 12, 2023Default functions in VolatileMemory trait lack bounds checks, potentially leading to out-of-bounds memory accesses
Sep 4, 2023