CVE-2018-25027

An issue was discovered in the libpulse-binding crate before 1.2.1 for Rust. get_format_info can cause a use-after-free.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2021-12-27

Last modified

2024-08-05

Weaknesses

CWE-416

Affected products

• Libpulse-binding (Libpulse-binding Project)

References

• https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/libpulse-binding/RUSTSEC-2018-0021.md
• https://rustsec.org/advisories/RUSTSEC-2018-0021.html