GitHub Advisoryadvisory · crates.io

GHSA-j52m-489x-v634 Double free in linea

CRITICAL Published 2021-08-25 Modified 2023-06-13 Official page ↗
Aliases
CVE-2019-16880
Ecosystem
crates.io
Packages
linea
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-415
Reviewed
2021-08-19

Affected packages

• crates.io linea: < 0.9.4 → fixed in 0.9.4

Description

Affected versions of this crate did not properly implements the Matrix::zip_elements method, which causes an double free when the given trait implementation might panic. This allows an attacker to corrupt or take control of the memory.

Related

Alias · CVE (1)

  • CVE-2019-16880 An issue was discovered in the linea crate through 0.9.4 for Rust. vulnerability

Weakness · CWE (1)

References