Mutable Reference Vulnerability in Rust Image Crate
CVE-2020-35916

5.5MEDIUM

Key Information:

Vendor

Image-rs

Status
Image
Vendor
CVE Published:
31 December 2020

What is CVE-2020-35916?

The image crate prior to version 0.23.12 introduces a vulnerability stemming from a mutable reference that has immutable provenance. This issue may lead to unexpected behavior or security risks, particularly in projects that rely on the integrity of the Rust programming environment and LLVM. Developers are urged to update their dependencies to the latest version to mitigate any associated risks.

References

https://rustsec.org/advisories/RUSTSEC-2020-0073.html
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.