Lucene search
+L

21 matches found

OSV
OSV
•added 2022/11/30 12:00 p.m.•35 views

RUSTSEC-2022-0070 Unsound API in `secp256k1` allows use-after-free and invalid deallocation from safe code

Because of incorrect bounds on method Secp256k1::preallocatedgennew it was possible to cause use-after-free from safe consumer code. It was also possible to "free" memory not allocated by the appropriate allocator. The method takes a place for storing the context as a mutable reference and return...

7.3AI score
SaveExploits0References4
Rows per page
Query Builder