3 matches found
PT-2021-24291
Name of the Vulnerable Software and Affected Versions: rusqlite versions 0.25.0 through 0.25.3 rusqlite versions 0.26.0 through 0.26.1 Description: The issue exists in the rusqlite crate for Rust, where several closure-accepting functions have a too relaxed lifetime bound. This can allow Rust cod...
futures_task::waker may cause a use-after-free if used on a type that isn't 'static
Affected versions of the crate did not properly implement a 'static lifetime bound on the waker function. This resulted in a use-after-free if Waker::wake is called after original data had been dropped. The flaw was corrected by adding 'static lifetime bound to the data waker takes...
PT-2020-17538
Name of the Vulnerable Software and Affected Versions futures-task crate versions prior to 0.3.6 Description An issue in the futures-task crate may cause a use-after-free in certain situations. The problem arises when the Waker::wake function is called after the original data has been dropped, du...