An issue was discovered in the xcb crate through 2020-12-10 for Rust. base::Error does not have soundness. Because of the public ptr field, a use-after-free or double-free can occur.
Weakness
The product calls free() twice on the same memory address.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Xcb | Xcb_project | * | 2020-12-10 (including) |
| Rust-xcb | Ubuntu | esm-apps/jammy | * |
| Rust-xcb | Ubuntu | groovy | * |
| Rust-xcb | Ubuntu | hirsute | * |
| Rust-xcb | Ubuntu | impish | * |
| Rust-xcb | Ubuntu | jammy | * |
| Rust-xcb | Ubuntu | kinetic | * |
| Rust-xcb | Ubuntu | lunar | * |
| Rust-xcb | Ubuntu | mantic | * |
| Rust-xcb | Ubuntu | oracular | * |
| Rust-xcb | Ubuntu | trusty | * |
| Rust-xcb | Ubuntu | upstream | * |