Intel

AIKIDO-2024-10282

logos is vulnerable to Improper Control of a Resource

Improper Control of a Resource Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
Published Sep 18, 2024

50

Medium Risk

This Affects:

rustlogos
0.9.0 - 0.14.1
Fixed in 0.14.2
Are you affected? Scan for Free

TL;DR

Affected versions of the package are vulnerable to memory leaks due to the use of unsafe code. The new version introduces an option to forbid the use of unsafe code, mitigating the risk of memory leaks caused by unsafe operations.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

logos is vulnerable to Improper Control of a Resource in versions 0.9.0 - 0.14.1.

How to fix this

Upgrade logos library to patch version and set the forbid_unsafe flag to true.