RUSTSEC-2021-0068: 
Rust vulnerability analysis and mitigation

An issue was discovered in the iced-x86 crate through version 1.10.3 for Rust programming language. The vulnerability involves unsafe usage of slice.get_unchecked(slice.length()) in the Decoder::new() function, which could lead to undefined behavior (RustSec Advisory, NVD).

The vulnerability exists in the Decoder::new() function where unsafe code uses data.get_unchecked(data.len()) to access memory. This operation is considered undefined behavior in Rust, as accessing an index equal to the slice's length is out-of-bounds, even if the resulting reference is not used. The issue was identified through Miri, a Rust interpreter for detecting undefined behavior (GitHub Issue).

The vulnerability has been assigned a CVSS v3.1 base score of 9.8 (CRITICAL), indicating severe potential impact. The vulnerability could lead to undefined behavior in Rust applications consuming this library, potentially resulting in memory corruption or other security-related issues (NVD).

The issue was fixed in a code change that removed the unsafe get_unchecked call. Users should upgrade to a version newer than 1.10.3 to resolve the vulnerability (GitHub Issue).