3785 matches found
Double free
An issue was discovered in the linea crate through 0.9.4 for Rust. There is double free in the Matrix::zipelements method...
CVE-2019-16880
The CVE-2019-16880 entry concerns the Rust crate linea up to version 0.9.4, where a double free vulnerability exists in the Matrix::zip_elements method. Multiple connected advisories (e.g., RUSTSEC-2019-0021 / GHSA) describe that affected crate versions may panic in trait implementations, enablin...
CVE-2019-16880
An issue was discovered in the linea crate through 0.9.4 for Rust. There is double free in the Matrix::zipelements method...
CVE-2019-16144
An issue was discovered in the generator crate before 0.6.18 for Rust. Uninitialized memory is used by Scope, done, and yield during API calls...
CVE-2019-16144
An issue was discovered in the generator crate before 0.6.18 for Rust. Uninitialized memory is used by Scope, done, and yield during API calls...
CVE-2019-16143
An issue was discovered in the blake2 crate before 0.8.1 for Rust. The BLAKE2b and BLAKE2s algorithms, when used with HMAC, produce incorrect results because the block sizes are half of the required sizes...
CVE-2019-16141
An issue was discovered in the oncecell crate before 1.0.1 for Rust. There is a panic during initialization of Lazy...
CVE-2019-16138
An issue was discovered in the image crate before 0.21.3 for Rust, affecting the HDR image format decoder. Vec::setlen is called on an uninitialized vector, leading to a use-after-free and arbitrary code execution...
CVE-2019-16141
An issue was discovered in the oncecell crate before 1.0.1 for Rust. There is a panic during initialization of Lazy...
CVE-2019-16137
An issue was discovered in the spin crate before 0.5.2 for Rust, when RwLock is used. Because memory ordering is mishandled, two writers can acquire the lock at the same time, violating mutual exclusion...
CVE-2019-16138
An issue was discovered in the image crate before 0.21.3 for Rust, affecting the HDR image format decoder. Vec::setlen is called on an uninitialized vector, leading to a use-after-free and arbitrary code execution...
CVE-2019-16139
An issue was discovered in the compactarena crate before 0.4.0 for Rust. Generativity is mishandled, leading to an out-of-bounds write or read...
CVE-2019-16139
An issue was discovered in the compactarena crate before 0.4.0 for Rust. Generativity is mishandled, leading to an out-of-bounds write or read...
CVE-2019-16140
An issue was discovered in the chttp crate before 0.1.3 for Rust. There is a use-after-free during buffer conversion...
CVE-2019-16140
An issue was discovered in the chttp crate before 0.1.3 for Rust. There is a use-after-free during buffer conversion...
CVE-2019-16137
An issue was discovered in the spin crate before 0.5.2 for Rust, when RwLock is used. Because memory ordering is mishandled, two writers can acquire the lock at the same time, violating mutual exclusion...
DEBIAN-CVE-2019-16137
An issue was discovered in the spin crate before 0.5.2 for Rust, when RwLock is used. Because memory ordering is mishandled, two writers can acquire the lock at the same time, violating mutual exclusion...
CVE-2019-16137
An issue was discovered in the spin crate before 0.5.2 for Rust, when RwLock is used. Because memory ordering is mishandled, two writers can acquire the lock at the same time, violating mutual exclusion...