CVE-2021-28306

CVE-2021-28306 affects the Rust fltk crate (before 0.15.3). The issue is a NULL pointer dereference when using a multi-label type if the image is nonexistent (also mapped to an out-of-bounds read in related advisories). The root cause is dereferencing a null/invalid image reference, potentially l...

CVE-2021-28307

CVE-2021-28307 affects the Rust crate fltk before version 0.15.3 . The issue is a NULL pointer dereference during attempted use of a non-raster image for a window icon. Multiple connected advisories (Red Hat, OSV, GHSA) reiterate this flaw; no patch/version remediation details are provided in the...

CVE-2021-28308

CVE-2021-28308 affects the Rust fltk crate (pre-0.15.3). The issue is an out-of-bounds read in the pixmap constructor due to missing input validation, enabling potential memory safety disruption. Affected version is