Description
An issue was discovered in the chttp crate before 0.1.3 for Rust. There is a use-after-free during buffer conversion.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | chttp | >= 0.1.1, < 0.1.3 | 0.1.3 | GHSA-5rrv-m36h-qwf8 |
Critical · 9.8
CVE-2019-16140
EUVD-2021-1581GHSA-5rrv-m36h-qwf8RUSTSEC-2019-0016
Use-after-free in chttp
Published Sep 9, 2019 · Updated Aug 5, 2024 · Assigned by mitre