PT-2025-21902 · Crates.Io · Macroquad

Published 2025-05-15 · Updated 2025-05-15

OSV

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Several soundness issues have been reported. Resolving them doesn't seem to be considered a priority. In particular, unprincipled use of mutable statics is pervasive throughout the library, making it possible to cause use-after-free in safe code.

Currently, no fixed version is available.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

GHSA-GG76-HG3V-5Q6C

Affected Products

Macroquad

References · 7

• https://osv.dev/vulnerability/GHSA-gg76-hg3v-5q6c · Vendor Advisory
• https://github.com/not-fl3/macroquad/issues/634 · Note
• https://github.com/not-fl3/macroquad · Note
• https://github.com/not-fl3/macroquad/issues/746 · Note
• https://github.com/not-fl3/macroquad/issues/333 · Note
• https://github.com/not-fl3/macroquad/issues/723 · Note
• https://rustsec.org/advisories/RUSTSEC-2025-0035.html · Note