{"id":"GHSA-hxjf-h2mh-r6hj","revision":"be30d7708eab4e599f0f18cfa1429d5f","records":[{"revision":"be30d7708eab4e599f0f18cfa1429d5f","observedAt":"2026-10-24T13:19:54.901+00:00","statement":{"source":"osv","id":"GHSA-hxjf-h2mh-r6hj","aliases":["CVE-2018-25027","CVE-2018-25028","GHSA-ghpq-vjxw-ch5w","GHSA-jqpv-jm4m-86j9","RUSTSEC-2018-0021"],"title":"Use After Free in libpulse-binding","description":"Affected versions contained a pair of use-after-free issues with the objects returned by the get_format_info and get_context methods of Stream objects. These objects were mistakenly being constructed without setting an important flag to prevent destruction of the underlying C objects they reference upon their own destruction.","state":0,"publishedAt":"2022-01-06T22:20:12+00:00","modifiedAt":"2023-11-08T04:00:15.029606+00:00","affected":[{"ecosystem":"crates.io","name":"libpulse-binding","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.2.1"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[{"system":"CVSS_V3","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":null,"severity":null},{"system":"Publisher rating","vector":null,"score":null,"severity":"HIGH"}],"references":["https://github.com/jnqnfe/pulse-binding-rust/security/advisories/GHSA-ghpq-vjxw-ch5w","https://nvd.nist.gov/vuln/detail/CVE-2018-25027","https://github.com/jnqnfe/pulse-binding-rust","https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/libpulse-binding/RUSTSEC-2018-0021.md","https://rustsec.org/advisories/RUSTSEC-2018-0021.html"],"sourceUrl":"https://github.com/advisories/GHSA-hxjf-h2mh-r6hj","license":"GitHub Advisory Database · CC-BY-4.0","key":"osv:GHSA-hxjf-h2mh-r6hj","identifiers":["GHSA-hxjf-h2mh-r6hj","CVE-2018-25027","CVE-2018-25028","GHSA-ghpq-vjxw-ch5w","GHSA-jqpv-jm4m-86j9","RUSTSEC-2018-0021"]},"retained":false,"historicalAffected":[]}],"coverage":[]}