Most recent entries from all

cnvd-2021-13696

EUVD-2026-24921

fkie_cve-2021-25904

An issue was discovered in the av-data crate before 0.3.0 for Rust. A raw pointer is dereferenced, leading to a read of an arbitrary memory address, sometimes causing a segfault.

GHSA-352p-rhvq-7g78 — Null pointer deference in av-data

Affected: crates.io: av-data

An issue was discovered in the av-data crate before 0.3.0 for Rust. A raw pointer is dereferenced, leading to a read of an arbitrary memory address, sometimes causing a segfault.

gsd-2021-25904

RUSTSEC-2021-0007 — `Frame::copy_from_raw_parts` can lead to segfault without `unsafe`

Affected: crates.io: av-data

`fn Frame::copy_from_raw_parts()` is a safe API that can take a raw pointer and dereference it. It is possible to read arbitrary memory address with an arbitrarily fed pointer. This allows the safe API to access & read arbitrary address in memory. Feeding an invalid memory address pointer to the API may also cause the program to segfault.

The flaw was corrected in https://github.com/rust-av/rust-av/pull/137, by removing the API `fn Frame::copy_from_raw_parts()`.