Résumé
Zoo Design Studio: Memory-corruption in memory handling of lib-kcl
Détails de l’avis
A race condition in kcl-lib can result in a use-after-free when accessing environments concurrently. During Vec reallocation, the previous buffer containing Box pointers is freed and replaced. A concurrent get_env operation that has already loaded a pointer to the old buffer may subsequently index into freed memory and retrieve a stale or corrupted Pin<Box
Références
Vulnérabilités liées
Tout Supply chain →- MEDIUMGHSA-mc9m-6fm9-pghc#zoo-kcl
Zoo Design Studio: Memory-corruption in memory handling of lib-kcl
- MEDIUMCVE-2026-73557
vLLM: Incomplete CVE-2025-62164 remediation can be bypassed by concurrent prompt parts
- HIGHCVE-2026-55784
free5GC AUSF authentication contexts can be overwritten by concurrent requests for the same SUPI
- MEDIUMCVE-2026-55406
Buffa has a Use-After-Free in OwnedView via Unsound 'static Lifetime Promotion in Deref
- MEDIUMCVE-2026-45404
OpenTelemetry-Go: Unsynchronized baggage map can panic under concurrent access
- MEDIUMCVE-2026-64865
New API: Redis user quota cache overwrite via PUT /api/user/self allows quota bypass