What’s Vulnerable › Vulnerabilities

CVE-2021-38188

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-08-08 · updated 2026-06-17

Description

An issue was discovered in the iced-x86 crate through 1.10.3 for Rust. In Decoder::new(), slice.get_unchecked(slice.length()) is used unsafely.

Affected products

• Iced-X86 Project Iced-X86: through 1.10.3

References

• https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/iced-x86/RUSTSEC-2021-0068.md
• https://rustsec.org/advisories/RUSTSEC-2021-0068.html
• https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/iced-x86/RUSTSEC-2021-0068.md
• https://rustsec.org/advisories/RUSTSEC-2021-0068.html

Get alerted when CVE-2021-38188 or the next vulnerability affects your stack