Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
โ€ขadded 2024/12/04 6:31 p.m.โ€ข24 views

Unsoundness in anstream

When given a valid UTF8 string "รถ\x1b๐Ÿ˜€", the function in crates/anstream/src/adapter/strip.rs will be confused. The UTF8 bytes are \xc3\xb6 then \x1b then \xf0\x9f\x98\x80. When looping over "non-printable bytes" \x1b\xf0 will be considered as some non-printable sequence. This will produce a brok...

7.2AI score
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
โ€ขadded 2021/02/09 12:00 a.m.โ€ข2 views

CVE-2021-26955: Unchecked Return Value

An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because xcb::xproto::GetAtomNameReply::name calls std::str::fromutf8unchecked on unvalidated bytes from an X server...

9.8CVSS5.8AI score0.01728EPSS
SaveExploits1References2
Rows per page
Query Builder