~ / search / GHSA-rqgx-hpg4-456r

GHSA-rqgx-hpg4-456r

Use-after-free in actix-codec

Source: GitHub Advisory Database (reviewed) Critical CVE-2020-35902

Packages

EcosystemPackageAffectedFixed in
crates.io actix-codec < 0.3.0 0.3.0

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in the actix-codec crate before 0.3.0-beta.1 for Rust. There is a use-after-free in Framed.

References

External links from the advisory. They lead to third-party sites.