CVE-2023-50711

Summary

CVE-2023-50711 affects the vmm-sys-util library, specifically the `FamStructWrapper` implementation in the `vmm_sys_util::fam` crate. In versions prior to 0.12.0, this component contained a vulnerability in its `deserialize` function, which can result in out-of-bounds memory access due to a mismatch between the header length and the flexible array length. This issue was rectified in version 0.12.0 with the addition of a check to ensure header and flexible array lengths match, and by limiting header length modification to Rust-unsafe code to prevent such access from Rust-safe code.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.