GHSA-mp6r-fgw2-rxfx

Arbitrary return types in xcb

Source: GitHub Advisory Database (reviewed) Critical CVE-2021-26956

Packages

Ecosystem	Package	Affected	Fixed in
crates.io	xcb	< 1.0.0	1.0.0

Details

As written in the advisory (Markdown source, shown as plain text).

The function xcb::xproto::GetPropertyReply::value() returns a slice of type T where T is an unconstrained type parameter. The raw bytes received from the X11 server are interpreted as the requested type. The users of the xcb crate are advised to only call this function with the intended types. These are u8, u16, and u32. This issue is tracked here: https://github.com/rust-x-bindings/rust-xcb/issues/95

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2021-26956 advisory
https://github.com/RustSec/advisory-db/issues/653 web
https://github.com/rust-x-bindings/rust-xcb/issues/95 web
https://github.com/rtbo/rust-xcb package
https://rustsec.org/advisories/RUSTSEC-2021-0019.html web