PT-2026-60256

In affected versions of this crate, let cxx string! is not exception safe. After creating the StackString, if match $value panics, the content of StackString is not yet initialized, while the drop implementation of StackString unconditionally deinitializes the content, leading to use of...

rkyv_dyn (>=0.1.0, <=0.5.1), stackstring (0.0.2) +12 more potentially affected by CVE-2021-31919 via rkyv (>=0.1.1, <=0.5.2)

rkyv CARGO version =0.1.1, =0.1.0, =0.1.1, =0.1.2, =0.1.0, =0.9.0, =0.9.0, =0.9.0, =0.8.0, =0.1.0, =0.9.0, =0.1.0, =0.1.0, =0.1.0, =0.1.5 Source cves: CVE-2021-31919 Source advisory: OSV:GHSA-W5CR-FRPH-HW7F...

rkyv_dyn (>=0.1.0, <=0.5.1), stackstring (0.0.2) +12 more potentially affected by CVE-2021-31919 via rkyv (>=0.1.1, <=0.5.2)

rkyv CARGO version =0.1.1, =0.1.0, =0.1.1, =0.1.2, =0.1.0, =0.9.0, =0.9.0, =0.9.0, =0.8.0, =0.1.0, =0.9.0, =0.1.0, =0.1.0, =0.1.0, =0.1.5 Source cves: CVE-2021-31919 Source advisory: OSV:RUSTSEC-2021-0054...

FLARE Script Series: Recovering Stackstrings Using Emulation with ironstrings

This blog post continues our Script Series where the FireEye Labs Advanced Reverse Engineering FLARE team shares tools to aid the malware analysis community. Today, we release ironstrings: a new IDAPython script to recover stackstrings from malware. The script leverages code emulation to overcome...