https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T12:48:29.717271+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2019-16881 CVE-2019-16881 2026-10-20T12:48:29.718900+00:00

An issue was discovered in the portaudio-rs crate through 0.3.1 for Rust. There is a use-after-free with resultant arbitrary code execution because of a lack of unwind safety in stream_callback and stream_finished_callback.

 https://cve.radiocsirt.org/vuln/rustsec-2019-0022 RUSTSEC-2019-0022 — Stream callback function is not unwind safe 2026-10-20T12:48:29.718953+00:00

Affected: crates.io: portaudio-rs

Affected versions of this crate is not panic safe within callback functions `stream_callback` and `stream_finished_callback`.

The call to user-provided closure might panic before a `mem::forget` call, which then causes a use after free that grants attacker to control the callback function pointer.

This allows an attacker to construct an arbitrary code execution . The flaw was reported by Phosphorus15.