GitHub Advisoryadvisory · crates.io

GHSA-mp6r-fgw2-rxfx Arbitrary return types in xcb

CRITICAL Published 2021-08-25 Modified 2023-06-13 Official page ↗
Aliases
CVE-2021-26956
Ecosystem
crates.io
Packages
xcb
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-657
Reviewed
2021-08-19

Affected packages

• crates.io xcb: < 1.0.0 → fixed in 1.0.0

Description

The function xcb::xproto::GetPropertyReply::value() returns a slice of type T where T is an unconstrained type parameter. The raw bytes received from the X11 server are interpreted as the requested type. The users of the xcb crate are advised to only call this function with the intended types. These are u8, u16, and u32. This issue is tracked here: https://github.com/rust-x-bindings/rust-xcb/issues/95

Related

Alias · CVE (1)

  • CVE-2021-26956 An issue was discovered in the xcb crate through 2021-02-04 for Rust. vulnerability

Weakness · CWE (1)

  • CWE-657 Violation of Secure Design Principles weakness

References