An issue was discovered in the libpulse-binding crate before 1.2.1 for Rust. get_format_info can cause a use-after-free.

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2018-25027 · Microsoft / collected KEV context

CVE-2018-25028 · Microsoft / collected KEV context

EUVD-2022-0623

GHSA-hxjf-h2mh-r6hj

EUVD-2022-0632

GHSA-jqpv-jm4m-86j9

GHSA-ghpq-vjxw-ch5w

RUSTSEC-2018-0021

cve-program · CVE-2018-25027

• https://rustsec.org/advisories/RUSTSEC-2018-0021.html
• https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/libpulse-binding/RUSTSEC-2018-0021.md

cve-program · CVE-2018-25028

• https://rustsec.org/advisories/RUSTSEC-2018-0021.html
• https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/libpulse-binding/RUSTSEC-2018-0021.md

euvd · EUVD-2022-0623

• https://rustsec.org/advisories/RUSTSEC-2018-0021.html
• https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/libpulse-binding/RUSTSEC-2018-0021.md

euvd · EUVD-2022-0632

• https://rustsec.org/advisories/RUSTSEC-2018-0021.html
• https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/libpulse-binding/RUSTSEC-2018-0021.md

nvd · CVE-2018-25027

• https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/libpulse-binding/RUSTSEC-2018-0021.md
• https://rustsec.org/advisories/RUSTSEC-2018-0021.html

nvd · CVE-2018-25028

• https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/libpulse-binding/RUSTSEC-2018-0021.md
• https://rustsec.org/advisories/RUSTSEC-2018-0021.html

osv · GHSA-ghpq-vjxw-ch5w

• https://github.com/jnqnfe/pulse-binding-rust/security/advisories/GHSA-ghpq-vjxw-ch5w
• https://github.com/jnqnfe/pulse-binding-rust
• https://rustsec.org/advisories/RUSTSEC-2018-0021.html

osv · GHSA-hxjf-h2mh-r6hj

• https://github.com/jnqnfe/pulse-binding-rust/security/advisories/GHSA-ghpq-vjxw-ch5w
• https://nvd.nist.gov/vuln/detail/CVE-2018-25027
• https://github.com/jnqnfe/pulse-binding-rust
• https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/libpulse-binding/RUSTSEC-2018-0021.md
• https://rustsec.org/advisories/RUSTSEC-2018-0021.html

osv · GHSA-jqpv-jm4m-86j9

• https://github.com/jnqnfe/pulse-binding-rust/security/advisories/GHSA-ghpq-vjxw-ch5w
• https://nvd.nist.gov/vuln/detail/CVE-2018-25028
• https://github.com/jnqnfe/pulse-binding-rust
• https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/libpulse-binding/RUSTSEC-2018-0021.md
• https://rustsec.org/advisories/RUSTSEC-2018-0021.html

osv · RUSTSEC-2018-0021

• https://crates.io/crates/libpulse-binding
• https://rustsec.org/advisories/RUSTSEC-2018-0021.html
• https://github.com/jnqnfe/pulse-binding-rust/commit/e6930e16573f0b6d12d6628ba5de59147d6f9e95

No related operational record is retained in the current change model.