PT-2021-16837 · Unknown · Basic Dsp Matrix

Published 2021-01-10 · Updated 2021-08-25 · CVE-2021-25906

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions basic dsp matrix crate versions prior to 0.9.2

Description An issue was discovered in the basic dsp matrix crate where a double drop can be performed when a TransformContent panic occurs. This happens because affected versions of the crate did not guard against double drop while temporarily duplicating objects' ownership using ptr::read(). Upon panic in a user-provided function conversion(), objects that are copied by ptr::read() are dropped twice, leading to memory corruption.

Recommendations For basic dsp matrix crate versions prior to 0.9.2, update to version 0.9.2 or later, which uses ManuallyDrop<T> to enclose objects that are to be temporarily duplicated, correcting the flaw.

Exploit

Fix

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

CVE-2021-25906

GHSA-FJR6-HM39-4CF9

RUSTSEC-2021-0009

Affected Products

Basic Dsp Matrix

References · 8

• 🔥 https://rustsec.org/advisories/RUSTSEC-2021-0009.html · Exploit
• https://osv.dev/vulnerability/GHSA-fjr6-hm39-4cf9 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-25906 · Security Note
• https://osv.dev/vulnerability/CVE-2021-25906 · Vendor Advisory
• https://osv.dev/vulnerability/RUSTSEC-2021-0009 · Vendor Advisory
• https://github.com/liebharc/basic_dsp/issues/47 · Note
• https://github.com/liebharc/basic_dsp · Note
• https://crates.io/crates/basic_dsp_matrix · Note