RUSTSEC-2025-0137: Unsoundness of safe reciprocal_mg10 #421
Description
Unsoundness of safe
reciprocal_mg10
| Details | |
|---|---|
| Package | ruint |
| Version | 1.17.0 |
| URL | recmo/uint#550 |
| Date | 2025-12-22 |
The function reciprocal_mg10 is marked as safe but can trigger undefined behavior (out-of-bounds access) because it relies on debug_assert! for safety checks instead of assert!.
When compiled in release mode, the debug_assert! is optimized out, potentially allowing invalid inputs to cause memory corruption.
See advisory page for additional details.