PT-2026-60502 · Anthropic · Buffa

CVE-2026-55406 · Publicado 2026-07-16 · Atualizado 2026-07-16

Mitre

CVSS v4.0

5.9

Média

Vetor base

AV:L/AC:H/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

Buffa is a pure-Rust Protocol Buffers implementation with first-class protobuf editions support. Prior to 0.7.0, a soundness bug in the OwnedView type allowed safe Rust code to trigger a use-after-free: the OwnedView::decode constructor transmuted a borrowed slice to &'static [u8], and the Deref implementation exposed the promoted 'static lifetime on borrowed view fields (such as &'static str and &'static [u8]) to callers, so the borrow checker permitted those references to outlive the OwnedView; once the OwnedView was dropped and its backing buffer freed, the references became dangling, enabling memory corruption, information disclosure of freed heap contents, and cross-thread misuse without any unsafe code in the calling application. This issue is fixed in version 0.7.0.

Correção

Use After Free

Information Disclosure

Enumeração de Fraquezas

CWE-416

CWE-200

Identificadores relacionados

CVE-2026-55406

Produtos afetados

Buffa

Referências · 5

• https://github.com/anthropics/buffa/security/advisories/GHSA-9pwq-gcrx-wghh · Nota
• https://github.com/anthropics/buffa/releases/tag/v0.7.0 · Nota
• https://github.com/anthropics/buffa/pull/154 · Nota
• https://github.com/anthropics/buffa/commit/7dcf50a1a40eca6ed8d6c6dd59f4310aa0d68b0e · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-55406 · Nota de Segurança