GitHub Advisoryadvisory · crates.io

GHSA-c8hq-x4mm-p6q6 Memory handling issues in xcb

MEDIUM Published 2021-08-25 Modified 2023-02-13 Official page ↗
Aliases
CVE-2020-36205
Ecosystem
crates.io
Packages
xcb
Severity
Moderate
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-415, CWE-416
Reviewed
2021-08-19

Affected packages

• crates.io xcb: < 1.0.0 → fixed in 1.0.0

Description

An issue was discovered in the xcb crate through 2020-12-10 for Rust. base::Error does not have soundness. Because of the public ptr field, a use-after-free or double-free can occur.

Related

Alias · CVE (1)

  • CVE-2020-36205 An issue was discovered in the xcb crate through 2020-12-10 for Rust. vulnerability

Weakness · CWE (2)

References