Gix-date: gix-date: undefined behavior due to invalid string generation
Summary
Gix-date: gix-date: undefined behavior due to invalid string generation
Original description
The description as published by the source.
A flaw was found in gix-date. The gix_date::parse::TimeBuf::as_str function can generate strings containing invalid non-UTF8 characters. This issue violates the internal safety invariants of the TimeBuf component, leading to undefined behavior when these malformed strings are subsequently processed. This could potentially result in application instability or other unforeseen consequences.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2026-0810 rust-gix-date
- Ubuntu UBUNTU-CVE-2026-0810 rust-gix-date
References
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- advisory rustsec.org
- package github.com
- report bugzilla.redhat.com
- report github.com
- web access.redhat.com
- web crates.io