HIGH7.5

GHSA-352p-rhvq-7g78

Null pointer deference in av-data

Details

An issue was discovered in the av-data crate before 0.3.0 for Rust. A raw pointer is dereferenced, leading to a read of an arbitrary memory address, sometimes causing a segfault.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/av-data

Introduced in: 0Fixed in: 0.3.0

Upgrade av-data to 0.3.0 or newer (ecosystem crates.io).

References

https://nvd.nist.gov/vuln/detail/CVE-2021-25904[ADVISORY]
https://github.com/rust-av/rust-av/issues/136[WEB]
https://github.com/rust-av/rust-av[PACKAGE]
https://rustsec.org/advisories/RUSTSEC-2021-0007.html[WEB]