THREAT OPS › Threat News › [GHSA] GHSA-qwgh-2vcv-g2f7 (medium) — block_buffer: panic corrupts inline buffer position
[GHSA] GHSA-qwgh-2vcv-g2f7 (medium) — block_buffer: panic corrupts inline buffer position
GHSA-qwgh-2vcv-g2f7 Severity: medium CVE: None
block_buffer: panic corrupts inline buffer position
### Summary
A caught panic may leave the cursor position of `EagerBuffer` or `ReadBuffer` in a corrupted state; this in turn allows out-of-bounds reads/writes.
### Details & PoC
The following two tests fail miri:
```rust #[cfg(miri)] #[test] fn eager_digest_blocks_panic_corrupts_inline_position
MITRE ATT&CK techniques
- CompressionT1027.015
Original source: https://github.com/advisories/GHSA-qwgh-2vcv-g2f7