CVE-2023-53156 Details

A buffer overflow vulnerability has been identified in the Transpose crate for Rust, affecting versions 0.1.0 prior to 0.2.3. The issue arises in the `transpose::transpose` function, where the safety check for the product of `input_width` and `input_height` can be bypassed due to integer overflow. This overflow can cause memory to be written past the end of the output buffer, leading to potential memory corruption. The vulnerability exists only in release mode, as debug mode prevents such overflows from occurring.

Users can update to Transpose crate version 0.2.3 or later, where this vulnerability has been patched.