Description
An issue was discovered in the portaudio-rs crate through 0.3.1 for Rust. There is a use-after-free with resultant arbitrary code execution because of a lack of unwind safety in stream_callback and stream_finished_callback.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | portaudio-rs | < 0.3.2 | 0.3.2 | GHSA-qpjr-ch72-2qq4 |
| crates.io | portaudio-rs | >= 0.0.0-0, < 0.3.2-0 | 0.3.2-0 | RUSTSEC-2019-0022 |