CVSS 3.0
9.8 criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2018-20998
Critical (9.8) in arrayfire arrayfire. EPSS 1.7% chance of exploitation in the next 30 days. Fixed in arrayfire 3.6.0.
An issue was discovered in the arrayfire crate before 3.6.0 for Rust. Addition of the repr() attribute to an enum is mishandled, leading to memory corruption.
Severity
- EPSS
- 1.7% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
- CWE
- CWE-119
- Published
- Modified
- Record from
- the NVD, synced
Affected
- arrayfire:arrayfire
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-69fv-gw6g-8ccg | crates.io | arrayfire | <3.6.0 | 3.6.0 |
| GHSA-69fv-gw6g-8ccg | PyPI | arrayfire | <3.6.0 | 3.6.0 |
| RUSTSEC-2018-0011 | crates.io | arrayfire | >=0.0.0-0 <3.6.0 | 3.6.0 |