Most recent entries from all

EUVD-2026-47889

fkie_cve-2020-35876

An issue was discovered in the rio crate through 2020-05-11 for Rust. A struct can be leaked, allowing attackers to obtain sensitive information, cause a use-after-free, or cause a data race.

GHSA-8rc5-mr4f-m243 — Use after free in rio

Affected: crates.io: rio

An issue was discovered in the rio crate through 2020-05-11 for Rust. A struct can be leaked, allowing attackers to obtain sensitive information, cause a use-after-free, or cause a data race.

gsd-2020-35876

RUSTSEC-2020-0021 — rio allows a use-after-free buffer access when a future is leaked

Affected: crates.io: rio

When a `rio::Completion` is leaked, its drop code will not run. The drop code is responsible for waiting until the kernel completes the I/O operation into, or out of, the buffer borrowed by `rio::Completion`. Leaking the struct will allow one to access and/or drop the buffer, which can lead to a use-after-free, data races or leaking secrets.

Upstream is not interested in fixing the issue.