CVE-2021-26956

An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because bytes from an X server can be interpreted as any data type returned by xcb::xproto::GetPropertyReply::value...

DEBIAN-CVE-2021-26955

An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because xcb::xproto::GetAtomNameReply::name calls std::str::fromutf8unchecked on unvalidated bytes from an X server...

CVE-2021-26956

An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because bytes from an X server can be interpreted as any data type returned by xcb::xproto::GetPropertyReply::value...

CVE-2021-26956

The CVE-2021-26956 issue affects the Rust xcb crate (pre-2021-02-04). Bytes from an X server can be interpreted as any data type returned by xcb::xproto::GetPropertyReply::value, causing a soundness violation. Reported CVSS data show a base score of 9.8 (CRITICAL) with network attack vector and n...