{"id":"RUSTSEC-2018-0021","revision":"2c54833c7c0044e097e9ca220ada7d24","records":[{"revision":"2c54833c7c0044e097e9ca220ada7d24","observedAt":"2026-10-24T13:19:54.901+00:00","statement":{"source":"osv","id":"RUSTSEC-2018-0021","aliases":["CVE-2018-25027","CVE-2018-25028","GHSA-ghpq-vjxw-ch5w","GHSA-hxjf-h2mh-r6hj","GHSA-jqpv-jm4m-86j9"],"title":"Use-after-free with objects returned by `Stream`'s `get_format_info` and `get_context` methods","description":"Affected versions contained a pair of use-after-free issues with the objects returned by the `get_format_info` and `get_context` methods of `Stream` objects. These objects were mistakenly being constructed without setting an important flag to prevent destruction of the underlying C objects they reference upon their own destruction.","state":0,"publishedAt":"2018-06-15T12:00:00+00:00","modifiedAt":"2026-10-12T18:00:02.6761994+00:00","affected":[{"ecosystem":"crates.io","name":"libpulse-binding","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0.0.0-0"},{"kind":"fixed","version":"1.2.1"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://crates.io/crates/libpulse-binding","https://rustsec.org/advisories/RUSTSEC-2018-0021.html","https://github.com/jnqnfe/pulse-binding-rust/commit/e6930e16573f0b6d12d6628ba5de59147d6f9e95"],"sourceUrl":"https://osv.dev/vulnerability/RUSTSEC-2018-0021","license":"OSV · upstream source license applies","key":"osv:RUSTSEC-2018-0021","identifiers":["RUSTSEC-2018-0021","CVE-2018-25027","CVE-2018-25028","GHSA-ghpq-vjxw-ch5w","GHSA-hxjf-h2mh-r6hj","GHSA-jqpv-jm4m-86j9"]},"retained":false,"historicalAffected":[]}],"coverage":[]}