GitHub Advisoryadvisory · crates.io

GHSA-fgfm-hqjw-3265 Out-of-bounds Write in actix-web

CRITICAL Published 2022-01-06 Modified 2026-06-09 Official page ↗
Aliases
CVE-2018-25025
Ecosystem
crates.io
Packages
actix-web
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-787
Reviewed
2022-01-06

Affected packages

• crates.io actix-web: < 0.7.19 → fixed in 0.7.19

Description

An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can unsoundly extend the lifetime of a string, leading to memory corruption.

Related

Alias · CVE (1)

  • CVE-2018-25025 An issue was discovered in the actix-web crate before 0.7.15 for Rust. vulnerability

Weakness · CWE (1)

  • CWE-787 Out-of-bounds Write weakness

References