{"id":"CVE-2019-12083","details":"The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust's safety guarantees and cause memory unsafety. If the `Error::type_id` method is overridden then any type can be safely cast to any other type, causing memory safety vulnerabilities in safe code (e.g., out-of-bounds write or read). Code that does not manually implement Error::type_id is unaffected.","modified":"2026-05-28T04:04:39.572123460Z","published":"2019-05-13T20:29:02.913Z","related":["SUSE-SU-2019:2439-1","SUSE-SU-2019:2755-1","openSUSE-SU-2019:2203-1","openSUSE-SU-2019:2244-1","openSUSE-SU-2019:2294-1","openSUSE-SU-2024:11359-1","openSUSE-SU-2024:11360-1"],"database_specific":{"unresolved_ranges":[{"source":"CPE_STRING","cpes":["cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*"],"vendor_product":"fedoraproject:fedora","extracted_events":[{"last_affected":"29"},{"last_affected":"30"}]},{"source":"CPE_STRING","cpes":["cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*"],"vendor_product":"opensuse:leap","extracted_events":[{"last_affected":"15.1"}]}]},"references":[{"type":"WEB","url":"https://groups.google.com/forum/#%21topic/rustlang-security-announcements/aZabeCMUv70"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HG47HYH3AQTUMBUMX3S3G5DNAY4CBW6N/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K6T4BNA5KQYJRIKIGGBOGBMR7TRXPHLR/"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00076.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00006.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00031.html"},{"type":"EVIDENCE","url":"https://blog.rust-lang.org/2019/05/13/Security-advisory.html"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/rust-lang/rust","events":[{"introduced":"91856ed52c58aa5ba66a015354d1cc69e9779bdf"},{"fixed":"6c2484dc3c532c052f159264e970278d8b77cdc9"}],"database_specific":{"cpe":"cpe:2.3:a:rust-lang:rust:*:*:*:*:*:*:*:*","source":"CPE_RANGE","extracted_events":[{"introduced":"1.34.0"},{"fixed":"1.34.2"}]}}],"versions":["1.34.1","1.34.0"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-12083.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}