GitHub Advisoryadvisory · crates.io

GHSA-3cj3-jrrp-9rxf Unchecked Return Value in xcb

HIGH Published 2021-08-25 Modified 2021-08-19 Official page ↗
Aliases
CVE-2021-26958
Ecosystem
crates.io
Packages
xcb
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-252
Reviewed
2021-08-19

Affected packages

• crates.io xcb: < 1.0.0 → fixed in 1.0.0

Description

An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because transmutation to the wrong type can happen after xcb::base::cast_event uses std::mem::transmute to return a reference to an arbitrary type.

Related

Alias · CVE (1)

  • CVE-2021-26958 An issue was discovered in the xcb crate through 2021-02-04 for Rust. vulnerability

Weakness · CWE (1)

  • CWE-252 Unchecked Return Value weakness

References