Out-of-bounds Write Affecting ruint package, versions <1.17.0
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-RUST-RUINT-14723281
- published28 Dec 2025
- disclosed26 Dec 2025
- creditUnknown
Introduced: 26 Dec 2025
New CVE NOT AVAILABLE CWE-787 (opens in a new tab)Common Weakness Enumeration (CWE) is a category system for software weaknesses
How to fix?
Upgrade ruint to version 1.17.0 or higher.
Overview
ruint is an Implements [Uint<BITS, LIMBS>], the ring of numbers modulo $2^{\mathsf{BITS}}$. It requires two generic arguments: the number of bits and the number of 64-bit 'limbs' required to store those bits.
Affected versions of this package are vulnerable to Out-of-bounds Write in the reciprocal_mg10 function. An attacker can cause memory corruption or trigger undefined behavior by providing invalid inputs when the code is compiled in release mode, as safety checks are omitted.