CVE-2019-16140 - An issue was discovered in the chttp crate before 0.1.3 for Rust

CRITICAL

An issue was discovered in the chttp crate before 0.1.3 for Rust

Published Sep 9, 2019

9.8

CRITICAL

CVSS 3.1

EPSS 1.63%

An issue was discovered in the chttp crate before 0.1.3 for Rust. There is a use-after-free during buffer conversion.

No remediation recorded yet.

Weaknesses (1)

CWE-416

Use After Free

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-1581		Advisory
https://github.com/advisories/GHSA-5rrv-m36h-qwf8		Advisory
https://github.com/sagebind/isahc/commit/9e9f1fb44114078c000c78c72e691eeb9e7ac260
https://github.com/sagebind/isahc/issues/2
https://nvd.nist.gov/vuln/detail/CVE-2019-16140
https://rustsec.org/advisories/RUSTSEC-2019-0016.html		Third Party Advisory