Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2024/10/15 3:30 p.m.22 views

PyO3 has a risk of use-after-free in `borrowed` reads from Python weak references

The family of functions to read "borrowed" values from Python weak references were fundamentally unsound, because the weak reference does itself not have ownership of the value. At any point the last strong reference could be cleared and the borrowed value would become dangling. In PyO3 0.22.4...

5.3CVSS6.6AI score0.00206EPSS
SaveExploits0References7Affected Software1
RustSec
RustSec
added 2024/10/12 12:0 p.m.7 views

Risk of use-after-free in `borrowed` reads from Python weak references

The family of functions to read "borrowed" values from Python weak references were fundamentally unsound, because the weak reference does itself not have ownership of the value. At any point the last strong reference could be cleared and the borrowed value would become dangling. In PyO3 0.22.4...

5.3CVSS6.9AI score0.00206EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder