GitHub Advisoryadvisory · crates.io
GHSA-j8cj-hw74-64jv Hive has Double-free and Use After Free Vulnerabilities
MEDIUM
Official page ↗
- Ecosystem
- crates.io
- Packages
- hivex
- Severity
- Moderate
- Weaknesses
- CWE-415, CWE-416
- Reviewed
- 2026-02-28
Affected packages
• crates.io hivex: >= 0.2.0, < 0.2.1 → fixed in 0.2.1
Description
`Drop` implementation for `Hive` did perform free, but so did `Hive::close`, which, at the end of the scope performed `Drop`, therefore triggering double-free.
Additionally, function `Hive::from_handle` was not marked as unsafe, making it, in combination with `as_handle` easy to clone and trigger double-free in safe code or triggering UB when using invalid pointer.