~ / search / GHSA-vjmg-pc8h-p6p8

GHSA-vjmg-pc8h-p6p8

Out of bounds read in fltk

Source: GitHub Advisory Database (reviewed) Critical CVE-2021-28308

Packages

EcosystemPackageAffectedFixed in
crates.io fltk < 0.15.3 0.15.3

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in the fltk crate before 0.15.3 for Rust. There is an out-of bounds read because the pixmap constructor lacks pixmap input validation.

References

External links from the advisory. They lead to third-party sites.