Lucene search
K

6 matches found

OSV
OSV
added 2026/05/27 12:0 p.m.7 views

RUSTSEC-2026-0152 Use-after-free

Affected versions of oneringbuf exposed the obsolete IntoRef::intoref method through the public IntoRef trait. For heap-backed ring buffers, this method returned a DroppableRef handle. DroppableRef stored an owning raw pointer created from Box::intoraw. Its Clone implementation copied this raw...

5.9AI score
Exploits0References4
RustSec
RustSec
added 2026/05/27 12:0 p.m.10 views

Use-after-free

Affected versions of oneringbuf exposed the obsolete IntoRef::intoref method through the public IntoRef trait. For heap-backed ring buffers, this method returned a DroppableRef handle. DroppableRef stored an owning raw pointer created from Box::intoraw. Its Clone implementation copied this raw...

5.9AI score
Exploits0Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/27 12:0 a.m.7 views

PT-2026-47162

Affected versions of oneringbuf exposed the obsolete IntoRef::into ref method through the public IntoRef trait. For heap-backed ring buffers, this method returned a DroppableRef handle. DroppableRef stored an owning raw pointer created from Box::into raw. Its Clone implementation copied this raw...

5.5AI score
Exploits0References4
OSV
OSV
added 2026/05/14 12:0 p.m.6 views

RUSTSEC-2026-0142 Double-free in `vmem` storage reachable from safe Rust (predecessor of `oneringbuf`)

mutringbuf is the archived predecessor of oneringbuf — the crate was renamed and the GitHub repository was archived on 2025-11-20. All released versions up to 1.0.0 carry the same vmem-feature double-free bug that affects oneringbuf, with the same code paths and the same reproduction shape. When...

5.9AI score
Exploits0References4
OSV
OSV
added 2026/05/14 12:0 p.m.3 views

RUSTSEC-2026-0143 Double-free in `vmem` storage reachable from safe Rust

When the vmem feature is enabled, VmemStorage::newBox and every public constructor that funnels through it — ConcurrentHeapRB::defaultcap, ConcurrentHeapRB::fromVec, From, etc. bit-copies the input buffer into a freshly mmap'd region with ptr::copynonoverlapping, then lets the source Box drop...

5.9AI score
Exploits0References3
RustSec
RustSec
added 2026/05/14 12:0 p.m.10 views

Double-free in `vmem` storage reachable from safe Rust (predecessor of `oneringbuf`)

mutringbuf is the archived predecessor of oneringbuf — the crate was renamed and the GitHub repository was archived on 2025-11-20. All released versions up to 1.0.0 carry the same vmem-feature double-free bug that affects oneringbuf, with the same code paths and the same reproduction shape. When...

5.9AI score
Exploits0
Rows per page
Query Builder