CVE-2018-25025

An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can unsoundly extend the lifetime of a string, leading to memory corruption.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2021-12-27

Last modified

2024-08-05

Weaknesses

CWE-787

Affected products

• Actix-web (Actix)

References

• https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/actix-web/RUSTSEC-2018-0019.md
• https://rustsec.org/advisories/RUSTSEC-2018-0019.html