{
  "affected": [
    {
      "database_specific": {
        "categories": [
          "memory-corruption"
        ],
        "cvss": null,
        "informational": "unsound"
      },
      "ecosystem_specific": {
        "affected_functions": null,
        "affects": {
          "arch": [],
          "functions": [
            "cgmath::Matrix2::swap_columns",
            "cgmath::Matrix3::swap_columns",
            "cgmath::Matrix4::swap_columns"
          ],
          "os": []
        }
      },
      "package": {
        "ecosystem": "crates.io",
        "name": "cgmath",
        "purl": "pkg:cargo/cgmath"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0.0.0-0"
            }
          ],
          "type": "SEMVER"
        }
      ],
      "versions": []
    }
  ],
  "aliases": [],
  "database_specific": {
    "license": "CC0-1.0"
  },
  "details": "The `Matrix2::swap_columns`, `Matrix3::swap_columns`, and `Matrix4::swap_columns`\nimplementations call `ptr::swap(\u0026mut self[a], \u0026mut self[b])`.\n\nWhen `a == b`, these safe APIs create two mutable references to the same matrix\ncolumn and pass them to `ptr::swap`. This violates Rust\u0027s aliasing rules and can\ntrigger undefined behavior. The issue can be reproduced from safe Rust by calling\n`swap_columns` with identical column indices, for example `m.swap_columns(0, 0)`.\n\nA minimal fix is to return early when the two column indices are equal before\ncalling `ptr::swap`.",
  "id": "RUSTSEC-2026-0197",
  "modified": "2026-07-03T13:44:38Z",
  "published": "2026-03-11T12:00:00Z",
  "references": [
    {
      "type": "PACKAGE",
      "url": "https://crates.io/crates/cgmath"
    },
    {
      "type": "ADVISORY",
      "url": "https://rustsec.org/advisories/RUSTSEC-2026-0197.html"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/rustgd/cgmath/issues/565"
    }
  ],
  "related": [],
  "severity": [],
  "summary": "`Matrix{2,3,4}::swap_columns` can trigger undefined behavior for identical indices"
}