CVE-2021-38188

Name of the Vulnerable Software and Affected Versions: iced-x86 versions 1.10.3 and earlier

Description: An issue was discovered in the iced-x86 crate where the Decoder::new() function uses slice.get unchecked(slice.length()) unsafely, potentially invoking undefined behavior. This may cause soundness issues in crates using the iced x86::Decoder struct.

Recommendations: For versions 1.10.3 and earlier, update to a version that includes the fix for the unsafe use of slice.get unchecked(slice.length()) in the Decoder::new() function. As a temporary workaround, consider avoiding the use of the iced x86::Decoder struct until a patched version is available.