Out-of-Bounds Read in fltk Crate for Rust Affects Multiple Versions
CVE-2021-28308

9.1CRITICAL

Key Information:

Vendor

Fltk Project

Status
Fltk
Vendor
CVE Published:
12 March 2021

What is CVE-2021-28308?

An out-of-bounds read vulnerability exists in the fltk crate for Rust, where a lack of input validation in the pixmap constructor can lead to potential exploitation. This issue may allow attackers to read memory outside the intended boundaries, potentially leaking sensitive information or causing application instability.

References

https://rustsec.org/advisories/RUSTSEC-2021-0038.html
x_refsource_MISC

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.