CVE-2021-26957: Out-of-bounds Read

An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because there is an out-of-bounds read in xcb::xproto::changeproperty, as demonstrated by a format=32 T=u8 situation where out-of-bounds bytes are sent to an X server...

PT-2021-17198

Name of the Vulnerable Software and Affected Versions: xcb crate through 2021-02-04 for Rust Description: The issue concerns a soundness violation in the xcb crate, which can lead to out-of-bounds reads and incorrect type transmutations. Specifically, the xcb::xproto::change property function can...

PT-2021-17197

Name of the Vulnerable Software and Affected Versions: xcb crate versions through 2021-02-04 Description: The issue concerns a soundness violation in the xcb crate for Rust, where bytes from an X server can be interpreted as any data type returned by xcb::xproto::GetPropertyReply::value. This is...

PT-2021-17199

Name of the Vulnerable Software and Affected Versions: xcb crate through 2021-02-04 for Rust Description: The issue concerns a soundness violation in the xcb crate, which can lead to transmutation to the wrong type after using std::mem::transmute to return a reference to an arbitrary type...