GHSA-j52m-489x-v634

Double free in linea

Source: GitHub Advisory Database (reviewed) Critical CVE-2019-16880

Packages

Ecosystem	Package	Affected	Fixed in
crates.io	linea	< 0.9.4	0.9.4

Details

As written in the advisory (Markdown source, shown as plain text).

Affected versions of this crate did not properly implements the Matrix::zip_elements method, which causes an double free when the given trait implementation might panic. This allows an attacker to corrupt or take control of the memory.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2019-16880 advisory
https://github.com/strake/linea.rs/issues/2 web
https://github.com/strake/linea.rs package
https://rustsec.org/advisories/RUSTSEC-2019-0021.html web