GHSA-xvcg-2q82-r87j

Panic mishandled in libpulse-binding

Source: GitHub Advisory Database (reviewed) High CVE-2019-25055

Packages

Ecosystem	Package	Affected	Fixed in
crates.io	libpulse-binding	< 2.6.0	2.6.0

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in the libpulse-binding crate before 2.6.0 for Rust. It mishandles a panic that crosses a Foreign Function Interface (FFI) boundary.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2019-25055 advisory
https://github.com/jnqnfe/pulse-binding-rust/commit/7fd282aef7787577c385aed88cb25d004b85f494 web
https://github.com/jnqnfe/pulse-binding-rust package
https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/libpulse-binding/RUSTSEC-2019-0038.md web
https://rustsec.org/advisories/RUSTSEC-2019-0038.html web