~ / search / GHSA-w4cc-pc2h-whcj

GHSA-w4cc-pc2h-whcj

Out-of-bounds Write in derive-com-impl

Source: GitHub Advisory Database (reviewed) High CVE-2021-45681

Packages

EcosystemPackageAffectedFixed in
crates.io derive-com-impl < 0.1.2 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in the derive-com-impl crate before 0.1.2 for Rust. An invalid reference (and memory corruption) can occur because AddRef might not be called before returning a pointer.

References

External links from the advisory. They lead to third-party sites.