RUSTSEC-2020-0146: 
Rust vulnerability analysis and mitigation

The generic-array crate before version 0.13.3 for Rust contained a soundness vulnerability identified as RUSTSEC-2020-0146. The vulnerability was related to the unsound extension of lifetimes through the arr! macro, which could silently and incorrectly extend arbitrary lifetimes to 'static (RustSec Advisory).

The vulnerability manifested through the arr! macro which incorrectly handled lifetime extensions. When using the macro, it would improperly extend arbitrary lifetimes to 'static without any warning, violating Rust's memory safety guarantees. The issue has a CVSS v3.1 Base Score of 7.5 (HIGH) with a vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (NVD Database).

The vulnerability could lead to memory safety violations in Rust programs using the generic-array crate. By improperly extending lifetimes, it could potentially cause use-after-free scenarios or other memory-related issues that could affect program stability and security (NVD Database).

The vulnerability was fixed in version 0.13.3 of the generic-array crate. Users should upgrade to this version or later to resolve the issue. The fix prevents the unsound lifetime extension behavior in the arr! macro (RustSec Advisory).