advisory-db
advisory-db copied to clipboard
Add advisory for libafl_bolts out-of-bounds access
This PR adds an advisory for a soundness issue in libafl_bolts.
Summary
The safe functions covmap_is_interesting_simd and covmap_is_interesting_naive can cause undefined behavior through out-of-bounds memory access.
Details
- Vulnerability: Use
get_uncheckedonhistslice with indices frommapslice - Impact: Out-of-bounds access when
hist.len() < map.len(), causing undefined behavior - Status: ✅ Fixed in main branch, awaiting release
- Fix: Functions marked as
unsafewith safety documentation
Hi @domenukk,
Per RustSec policy, could you please confirm you're okay with publishing this advisory for the soundness issue https://github.com/AFLplusplus/LibAFL/issues/3417?
Thanks!