High, CVSS 7.5crates.ioPublished
Double free in basic_dsp_matrix
CVE-2021-25906 · GHSA-fjr6-hm39-4cf9
- Affected
- crates.io basic_dsp_matrix < 0.9.2
- Fixed in
- 0.9.2· Vendor fix available
- Issue
- An issue was discovered in the basicdspmatrix crate before 0.9.2 for Rust. When a TransformContent panic occurs, a double drop can be performed.
Recommended action: Upgrade to 0.9.2 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.