~ / search / GHSA-2vx6-fcw6-hpr6

GHSA-2vx6-fcw6-hpr6

Reference counting error in pyo3

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-35917

Packages

EcosystemPackageAffectedFixed in
crates.io pyo3 >= 0.12.0, < 0.12.4 0.12.4

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in the pyo3 crate before 0.12.4 for Rust. There is a reference-counting error and use-after-free in From<Py<T>>.

References

External links from the advisory. They lead to third-party sites.