xcb
crates.io5 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting xcbpage 1 of 1
- CVE-2020-36205MEDIUMCVSS 5.5EG 5.5fixed in 1.0.02021-01-26
An issue was discovered in the xcb crate through 2020-12-10 for Rust. base::Error does not have soundness. Because of the public ptr field, a use-after-free or double-free can occur.
- CVE-2021-26955CRITICALCVSS 9.8EG 9.8fixed in 1.0.02021-02-09
An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because xcb::xproto::GetAtomNameReply::name() calls std::str::from_utf8_unchecked() on unvalidated bytes from an X server.
- CVE-2021-26956CRITICALCVSS 9.8EG 9.8fixed in 1.0.02021-02-09
An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because bytes from an X server can be interpreted as any data type returned by xcb::xproto::GetPropertyReply::value.
- CVE-2021-26957CRITICALCVSS 9.8EG 9.8fixed in 1.0.02021-02-09
An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because there is an out-of-bounds read in xcb::xproto::change_property(), as demonstrated by a format=32 T=u8 situation where out-of-bounds …
- CVE-2021-26958HIGHCVSS 8.8EG 8.8fixed in 1.0.02021-02-09
An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because transmutation to the wrong type can happen after xcb::base::cast_event uses std::mem::transmute to return a reference to an arbitrar…
Check whether xcb is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for xcb CVEs against the assets you own.
Book a Demo →