GitHub Advisoryadvisory · crates.io

GHSA-vhfr-v4w9-45v8 Improper Input Validation in renderdoc

CRITICAL Published 2021-08-25 Modified 2023-06-13 Official page ↗
Aliases
CVE-2019-16142
Ecosystem
crates.io
Packages
renderdoc
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-20
Reviewed
2021-08-19

Affected packages

• crates.io renderdoc: < 0.5.0 → fixed in 0.5.0

Description

Affected versions of this crate exposed several methods which took self by immutable reference, despite the requesting the RenderDoc API to set a mutable value internally. This is technically unsound and calling these methods from multiple threads without synchronization could lead to unexpected and unpredictable behavior. The flaw was corrected in release 0.5.0.

Related

Alias · CVE (1)

  • CVE-2019-16142 An issue was discovered in the renderdoc crate before 0.5.0 for Rust. vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References