GHSA-p444-p2rm-hvrw: Duplicate Advisory: transpose: Buffer overflow due to integer overflow

July 27, 2025 (updated July 28, 2025)

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-5gmm-6m36-r7jh. This link is maintained to preserve external references.

Original Description

The transpose crate before 0.2.3 for Rust allows an integer overflow via input_width and input_height arguments.

References

crates.io/crates/transpose
github.com/advisories/GHSA-5gmm-6m36-r7jh
github.com/advisories/GHSA-p444-p2rm-hvrw
github.com/ejmahler/transpose
github.com/ejmahler/transpose/issues/11
nvd.nist.gov/vuln/detail/CVE-2023-53156
rustsec.org/advisories/RUSTSEC-2023-0080.html

Code Behaviors & Features

Detect and mitigate GHSA-p444-p2rm-hvrw with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →