240 matches found
CVE-2021-45681
An issue was discovered in the derive-com-impl crate before 0.1.2 for Rust. An invalid reference and memory corruption can occur because AddRef might not be called before returning a pointer...
Memory corruption
An issue was discovered in the derive-com-impl crate before 0.1.2 for Rust. An invalid reference and memory corruption can occur because AddRef might not be called before returning a pointer...
Rust 缓冲区错误漏洞
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in versions of Rust derive-com-impl crate prior to 0.1.2, which may result in invalid references and memory corruption...
CVE-2021-45681
An issue was discovered in the derive-com-impl crate before 0.1.2 for Rust. An invalid reference and memory corruption can occur because AddRef might not be called before returning a pointer...
CVE-2021-45681
An issue was discovered in the derive-com-impl crate before 0.1.2 for Rust. An invalid reference and memory corruption can occur because AddRef might not be called before returning a pointer...
CVE-2021-45681
CVE-2021-45681 affects the Rust crate derive-com-impl prior to 0.1.2. The issue is an invalid reference leading to memory corruption because AddRef may not be called before returning a pointer. Multiple sources (OSV/RUSTSEC/RUST) detail the same root cause and note the fix was committed (9803f31f...
CVE-2021-45681: Out-of-bounds Write
An issue was discovered in the derive-com-impl crate before 0.1.2 for Rust. An invalid reference and memory corruption can occur because AddRef might not be called before returning a pointer...
ai.apiverse:apipulse (>='1.0.3', <=1.0.20), ai.eto:rikai_2.12 (>=0.0.2, <=0.0.13) +5543 more potentially affected by CVE-2021-45105 via org.apache.logging.log4j:log4j-core (>=2.13.0, <=2.16.0)
org.apache.logging.log4j:log4j-core MAVEN version =2.13.0, ='1.0.3', =0.0.2, =2.1.0, =3.32.1.7, =1.4.0, =1.4.0, =1.4.0, =1.4.0, =1.4.0, =1.4.0, =1.4.0, =1.4.0, =1.4.0, =1.4.0, =0.2.3, =0.2.4 and more Source cves: CVE-2021-45105 Source advisory: GHSA-P6XC-XR62-6R2G...
PT-2021-27924
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ crash has been reported, involving the uncompress b44 impl, default decompress chunk, and exr decoding run functions. No...
GHSA-RCCQ-J2M7-8FWR Double-free in id-map
A double free can occur in removeset upon a panic in a Drop impl. When removing a set of elements, ptr::dropinplace is called on each of the element to be removed. If the Drop impl of one of these elements panics then the previously dropped elements can be dropped again...
Double-free in id-map
A double free can occur in removeset upon a panic in a Drop impl. When removing a set of elements, ptr::dropinplace is called on each of the element to be removed. If the Drop impl of one of these elements panics then the previously dropped elements can be dropped again...
GHSA-VPW8-43WM-RXW5 Double free in endian_trait
An issue was discovered in the endiantrait crate through 2021-01-04 for Rust. A double drop can occur when a user-provided Endian impl panics...
Data race in va-ts
In the affected versions of this crate, Demuxer unconditionally implemented Send with no trait bounds on T. This allows sending a non-Send type T across thread boundaries, which can cause undefined behavior like unlocking a mutex from a thread that didn't lock the mutex, or memory corruption from...
Moderate: Red Hat Security Advisory: Red Hat Fuse 7.9.0 release and security update
A minor version update from 7.8 to 7.9 is now available for Red Hat Fuse. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring...
ch.qos.logback:logback-examples (0.9.11), org.coosproject.examples:ping-impl (>=1.0.0, <=1.3.1) potentially affected by CVE-2017-5929 via ch.qos.logback:logback-classic (0.9.11)
ch.qos.logback:logback-classic MAVEN version 0.9.11 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:logback-examples 0.9.11 - org.coosproject.examples:ping-impl =1.0.0, =1.3.1 Source...
PT-2021-28292
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 3 crash has been reported. The crash involves the AK::Formatter and AK:: format value functions, as well as the AK::vformat...
PT-2021-28240
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 8 crash has been reported. The crash involves the AK::StringView::StringView function, AK:: format value, and AK::vformat impl...
PT-2021-28220
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. Technical details include the crash type and state, with specific function names such as exif...
PT-2021-28218
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details include the crash type and state, with specific function names such as exif...