Vulnerability GHSA-hxjf-h2mh-r6hj
High Risk
HIGH RISK
CVSS Score: 7.5
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
4 years ago
January 06, 2022 at 10:20 PM UTC
Use After Free in libpulse-binding
1.0.0 - 1.2.0
1.0.0 - 1.2.0
Summary
Use After Free in libpulse-binding
Details
Affected versions contained a pair of use-after-free issues with the objects returned by the get_format_info and get_context methods of Stream objects. These objects were mistakenly being constructed without setting an important flag to prevent destruction of the underlying C objects they reference upon their own destruction.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
2 years ago
Use after free in libpulse-binding
1.0.5 - 2.4.0 GHSA-f56g-chqp-22m9
1.0.5 - 2.4.0 GHSA-f56g-chqp-22m9
High Risk
4 years ago
Panic mishandled in libpulse-binding
1.0.0 - 2.5.0 GHSA-xvcg-2q82-r87j
1.0.0 - 2.5.0 GHSA-xvcg-2q82-r87j
High Risk
4 years ago
Use After Free in libpulse-binding
1.0.0 - 1.2.0 GHSA-jqpv-jm4m-86j9
1.0.0 - 1.2.0 GHSA-jqpv-jm4m-86j9
High Risk
5 years ago
Use after free in libpulse-binding
1.0.0 - 1.2.0 GHSA-ghpq-vjxw-ch5w
1.0.0 - 1.2.0 GHSA-ghpq-vjxw-ch5w
Unknown
7 years ago
Fix for UB in failure to catch panics crossing FFI boundaries
1.0.0 - 2.5.0 RUSTSEC-2019-0038
1.0.0 - 2.5.0 RUSTSEC-2019-0038
Impacted packages
Timeline
Published
4 years ago
January 06, 2022 at 10:20 PM UTC
Fixed (1.2.1)
8 years ago
June 15, 2018 at 04:16 PM UTC
Last Modified
2 years ago
November 08, 2023 at 04:00 AM UTC