Issues · rkyv/rkyv · GitHub

Labels Milestones New issue

Out-of-bounds reads in deserializing crafted archives with `Rc`

#670

· Shnatsel opened

on May 13, 2026

SEGV in `ArchivedString::deserialize` for `HashMap<String, String>` value (related #663/#666 family)

#669

· mariofeter opened

on May 12, 2026

SwissTable probing/traversal can non-terminate after checked access on crafted HashMap (`0.8.16`)

#668

· KaiVarus opened

on May 12, 2026

Reachable `debug_assert!` in `swiss_table::table::control_raw` via crafted HashMap from safe API

#667

· mariofeter opened

on May 11, 2026

Heap-use-after-free in `ArchivedString::deserialize` for `#[derive(Archive)]` struct with String fields

#666

· mariofeter opened

on May 11, 2026

OOB read via `u64::from_le_bytes` on crafted ArchivedHashTable bucket offset

#665

· mariofeter opened

on May 11, 2026

Heap-buffer-overflow in SIMD path of `ArchivedHashTable::control_raw` via crafted HashMap bucket count

#664

· mariofeter opened

on May 11, 2026

Heap-buffer-overflow / OOB read in `from_bytes::<HashMap<String, _>>` via crafted ArchivedString pointer

#663

· mariofeter opened

on May 11, 2026

Document how to implement shared (de)serialization for `Arc<Path>`-style data structures

#662

· Yoric opened

on Apr 28, 2026

Improve error message for 'out of range integral type conversion attempted'

#658

· djkoloski opened

on Apr 12, 2026

Add a "trait alias" for the serializer used by `to_bytes` and other high/low-level APIs

#654

· djkoloski opened

on Mar 26, 2026

Warning is emitted when a struct contains a deprecated field

#632

· ian-h-chamberlain opened

on Nov 5, 2025