CRITICAL9.8

GHSA-j52m-489x-v634

Double free in linea

Details

Affected versions of this crate did not properly implements the Matrix::zip_elements method, which causes an double free when the given trait implementation might panic. This allows an attacker to corrupt or take control of the memory.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/linea

Introduced in: 0Fixed in: 0.9.4

Upgrade linea to 0.9.4 or newer (ecosystem crates.io).

References

https://nvd.nist.gov/vuln/detail/CVE-2019-16880[ADVISORY]
https://github.com/strake/linea.rs/issues/2[WEB]
https://github.com/strake/linea.rs[PACKAGE]
https://rustsec.org/advisories/RUSTSEC-2019-0021.html[WEB]