PT-2021-24255 · Unknown · Derive-Com-Impl

Connicpu · Published 2021-01-20 · Updated 2022-06-16 · CVE-2021-45681

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: derive-com-impl crate versions prior to 0.1.2

Description: An issue in the derive-com-impl crate can cause an invalid reference and memory corruption because the AddRef method might not be called before returning a pointer. The QueryInterface method implementation is faulty, as it does not call IUnknown::AddRef before returning the pointer, which can lead to an invalid reference when IUnknown::Release is called. This is due to the reference count not being incremented as expected.

Recommendations: For versions prior to 0.1.2, the only way to quick fix this is to use the macro expanded version of the code and modify the QueryInterface method to add the AddRef call yourself.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2021-45681

GHSA-9RG7-3J4F-CF4X

GHSA-W4CC-PC2H-WHCJ

RUSTSEC-2021-0083

Affected Products

Derive-Com-Impl

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2021-45681 · Security Note
• https://osv.dev/vulnerability/GHSA-w4cc-pc2h-whcj · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-9rg7-3j4f-cf4x · Vendor Advisory
• https://osv.dev/vulnerability/RUSTSEC-2021-0083 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-45681 · Vendor Advisory
• https://github.com/Connicpu/com-impl/commit/9803f31fbd1717d482d848f041044d061fca6da7 · Note
• https://github.com/Connicpu/com-impl/issues/1 · Note
• https://github.com/Connicpu/com-impl · Note
• https://github.com/connicpu/com-impl · Note
• https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/derive-com-impl/RUSTSEC-2021-0083.md · Note
• https://rustsec.org/advisories/RUSTSEC-2021-0083.html · Note
• https://crates.io/crates/derive-com-impl · Note