THREATOPS
THREAT OPSThreat News › [GHSA] GHSA-qwgh-2vcv-g2f7 (medium) — block_buffer: panic corrupts inline buffer position

[GHSA] GHSA-qwgh-2vcv-g2f7 (medium) — block_buffer: panic corrupts inline buffer position

medgithub_advisoriesPublished 2026-08-19

GHSA-qwgh-2vcv-g2f7 Severity: medium CVE: None

block_buffer: panic corrupts inline buffer position

### Summary

A caught panic may leave the cursor position of `EagerBuffer` or `ReadBuffer` in a corrupted state; this in turn allows out-of-bounds reads/writes.

### Details & PoC

The following two tests fail miri:

```rust #[cfg(miri)] #[test] fn eager_digest_blocks_panic_corrupts_inline_position

MITRE ATT&CK techniques

Original source: https://github.com/advisories/GHSA-qwgh-2vcv-g2f7