Vulnerability RUSTSEC-2018-0021
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
8 years ago
June 15, 2018 at 12:00 PM UTC
Use-after-free with objects returned by `Stream`'s `get_format_info` and `get_context` methods
1.0.0 - 1.2.0
1.0.0 - 1.2.0
Summary
Use-after-free with objects returned by `Stream`'s `get_format_info` and `get_context` methods
Details
Affected versions contained a pair of use-after-free issues with the objects returned by the get_format_info and get_context methods of Stream objects. These objects were mistakenly being constructed without setting an important flag to prevent destruction of the underlying C objects they reference upon their own destruction.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
2 years ago
Use after free in libpulse-binding
1.0.5 - 2.4.0 GHSA-f56g-chqp-22m9
1.0.5 - 2.4.0 GHSA-f56g-chqp-22m9
High Risk
4 years ago
Use After Free in libpulse-binding
1.0.0 - 1.2.0 GHSA-hxjf-h2mh-r6hj
1.0.0 - 1.2.0 GHSA-hxjf-h2mh-r6hj
High Risk
4 years ago
Panic mishandled in libpulse-binding
1.0.0 - 2.5.0 GHSA-xvcg-2q82-r87j
1.0.0 - 2.5.0 GHSA-xvcg-2q82-r87j
High Risk
4 years ago
Use After Free in libpulse-binding
1.0.0 - 1.2.0 GHSA-jqpv-jm4m-86j9
1.0.0 - 1.2.0 GHSA-jqpv-jm4m-86j9
High Risk
5 years ago
Use after free in libpulse-binding
1.0.0 - 1.2.0 GHSA-ghpq-vjxw-ch5w
1.0.0 - 1.2.0 GHSA-ghpq-vjxw-ch5w
Impacted packages
Timeline
Published
8 years ago
June 15, 2018 at 12:00 PM UTC
Fixed (1.2.1)
8 years ago
June 15, 2018 at 04:16 PM UTC
Last Modified
1 day ago
October 12, 2026 at 06:00 PM UTC