Junglewise Threat Intelligence

CVE-2018-25001: RUSTSEC-2018-0020 - Possible use-after-free with `proplist::Iterator`

CVE-2018-25001 · Severity: low · CVSS 3.1 · Published 2018-12-22

Technologies: libpulse-binding (crates.io). Vendors: crates.io.

Executive brief

Possible use-after-free with `proplist::Iterator`

Affected products

crates.io libpulse-binding

Related threats

RUSTSEC-2020-0055 - Please see RUSTSEC-2018-0020
RUSTSEC-2019-0038 - Fix for UB in failure to catch panics crossing FFI boundaries
RUSTSEC-2018-0021 - Use-after-free with objects returned by `Stream`'s `get_format_info` and `get_context` methods