Stream: git-wasmtime

Topic: wasmtime / issue #13714 RUSTSEC-2026-0186: Unchecked poin...

Wasmtime GitHub notifications bot (Jun 23 2026 at 00:35):

github-actions[bot] opened issue #13714:

Unchecked pointer offset in crate memmap2

Details
Status	unsound
Package	memmap2
Version	0.2.3
URL	https://github.com/RazrFalcon/memmap2-rs/issues/169
Date	2026-06-20

Affected versionf of memmap2 did not perform enough validation on the offset and len parameters of
Mmap::[unchecked_]advise_range(),
MmapMut::[unchecked_]advise_ranage()
and MmapMut::flush[_async]_range().

This can cause undefined behavior due to invalid values being passed to [pointer::offset()] and [pointer::add()]
when passing an out-of-bounds range to any of the affected functions.

The flaw was corrected in commit [cee7cf0] and released in version 0.9.11.

The invalid pointer is not dereferenced,
but it is passed to the madvise and msync syscalls and their Windows equivalents.

[pointer::offset()]: https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.offset-1
[pointer::add()]: https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.add-1
[cee7cf0] https://github.com/RazrFalcon/memmap2-rs/pull/170/changes/cee7cf03a9ee095982a3c37b7aac8e3f68f1a00c

See advisory page for additional details.

Wasmtime GitHub notifications bot (Jun 29 2026 at 16:22):

fitzgen closed issue #13714:

Unchecked pointer offset in crate memmap2

Details
Status	unsound
Package	memmap2
Version	0.2.3
URL	https://github.com/RazrFalcon/memmap2-rs/issues/169
Date	2026-06-20

Affected versionf of memmap2 did not perform enough validation on the offset and len parameters of
Mmap::[unchecked_]advise_range(),
MmapMut::[unchecked_]advise_ranage()
and MmapMut::flush[_async]_range().

This can cause undefined behavior due to invalid values being passed to [pointer::offset()] and [pointer::add()]
when passing an out-of-bounds range to any of the affected functions.

The flaw was corrected in commit [cee7cf0] and released in version 0.9.11.

The invalid pointer is not dereferenced,
but it is passed to the madvise and msync syscalls and their Windows equivalents.

[pointer::offset()]: https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.offset-1
[pointer::add()]: https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.add-1
[cee7cf0] https://github.com/RazrFalcon/memmap2-rs/pull/170/changes/cee7cf03a9ee095982a3c37b7aac8e3f68f1a00c

See advisory page for additional details.

Last updated: Jul 29 2026 at 05:03 UTC