PT-2025-62955 · Crates.Io · Maxminddb
Published
2025-12-02
·
Updated
2025-12-02
CVSS v4.0
1.0
Low
| Vector | AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U |
maxminddb prior to version 0.27 declared
Reader::open mmap as safe despite wrapping an inherently unsafe memmap2 operation with no extra step done to guarantee safety. This could have led to undefined behaviour if the file were to be modified on disk while the memory map was still active.Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Maxminddb