An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because xcb::xproto::GetAtomNameReply::name() calls std::str::from_utf8_unchecked() on unvalidated bytes from an X server.
The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Xcb | Xcb_project | * | 2021-02-04 (including) |
| Rust-xcb | Ubuntu | groovy | * |
| Rust-xcb | Ubuntu | hirsute | * |
| Rust-xcb | Ubuntu | impish | * |
| Rust-xcb | Ubuntu | kinetic | * |
| Rust-xcb | Ubuntu | lunar | * |
| Rust-xcb | Ubuntu | mantic | * |
| Rust-xcb | Ubuntu | trusty | * |