Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2026/01/26 7:36 p.m.26 views

CVE-2026-0810 Gix-date: gix-date: undefined behavior due to invalid string generation

A flaw was found in gix-date. The gixdate::parse::TimeBuf::asstr function can generate strings containing invalid non-UTF8 characters. This issue violates the internal safety invariants of the TimeBuf component, leading to undefined behavior when these malformed strings are subsequently processed...

7.1CVSS0.00193EPSS
SaveExploits1References5
RustSec
RustSec
added 2025/12/29 12:0 p.m.8 views

Non-utf8 String can be created with `TimeBuf::as_str`

The function gixdate::parse::TimeBuf::asstr can create an illegal string containing non-utf8 characters. This violates the safety invariant of TimeBuf and can lead to undefined behavior when consuming the string. The bug can be prevented by adding str::fromutf8 to the function TimeBuf::write...

7.1CVSS7.3AI score0.00193EPSS
SaveExploits1Affected Software1
Rows per page
Query Builder