CVE-2021-45681

CVE-2021-45681 affects the Rust crate derive-com-impl prior to 0.1.2. The issue is an invalid reference leading to memory corruption because AddRef may not be called before returning a pointer. Multiple sources (OSV/RUSTSEC/RUST) detail the same root cause and note the fix was committed (9803f31f...