Lucene search

K
osvGoogleOSV:GHSA-5RRV-M36H-QWF8
HistoryAug 25, 2021 - 8:44 p.m.

Use-after-free in chttp

2021-08-2520:44:40
Google
osv.dev
13
vulnerability
memory corruption
undefined behavior
fix
version 0.1.3
chttp

EPSS

0.002

Percentile

64.7%

The From implementation for Vec was not properly implemented, returning a vector backed by freed memory. This could lead to memory corruption or be exploited to cause undefined behavior.

A fix was published in version 0.1.3.

EPSS

0.002

Percentile

64.7%

Related for OSV:GHSA-5RRV-M36H-QWF8