CVE-2018-25027
Use-after-free with objects returned by `Stream`'s `get_format_info` and `get_context` methods
Résumé
Use-after-free with objects returned by Stream's get_format_info and get_context methods
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Affected versions contained a pair of use-after-free issues with the objects returned by the get_format_info and get_context methods of Stream objects. These objects were mistakenly being constructed without setting an important flag to prevent destruction of the underlying C objects they reference upon their own destruction.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
crates.io
libpulse-binding
[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"1.2.1"}]}]
Références
- advisory rustsec.org
- package crates.io
- web github.com