rustsec/advisory-db
1
0
Fork 0
mirror of https://github.com/rustsec/advisory-db.git synced 2025-12-27 01:54:07 -05:00
Code Issues Packages Projects Releases Wiki Activity
Files
main
advisory-db/crates/portaudio-rs/RUSTSEC-2019-0022.md
Alexis Mousset 84c633df9c Update aliases from GHSA OSV export (#1693)
2023-06-13 15:10:24 +02:00

828 B
Raw Permalink Blame History 

[advisory]
id = "RUSTSEC-2019-0022"
package = "portaudio-rs"
aliases = ["CVE-2019-16881", "GHSA-qpjr-ch72-2qq4"]
cvss = "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
categories = ["code-execution", "memory-corruption"]
date = "2019-09-14"
keywords = ["audio", "ffi"]
url = "https://github.com/mvdnes/portaudio-rs/issues/20"

[versions]
patched = ["> 0.3.1"]

Stream callback function is not unwind safe

Affected versions of this crate is not panic safe within callback functions stream_callback and stream_finished_callback.

The call to user-provided closure might panic before a mem::forget call, which then causes a use after free that grants attacker to control the callback function pointer.

This allows an attacker to construct an arbitrary code execution .

The flaw was reported by Phosphorus15.