Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2021/08/25 8:54 p.m.33 views

Use after free in Rocket

Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop,...

7.5CVSS6.8AI score0.01025EPSS
SaveExploits1References6Affected Software1
RustSec
RustSec
added 2021/02/09 12:0 p.m.27 views

Use after free possible in `uri::Formatter` on panic

Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop,...

7.5CVSS1.2AI score0.01025EPSS
SaveExploits1Affected Software1
OSV
OSV
added 2021/02/09 12:0 p.m.29 views

RUSTSEC-2021-0044 Use after free possible in `uri::Formatter` on panic

Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop,...

7.3CVSS7AI score0.01025EPSS
SaveExploits1References3
Rows per page
Query Builder