crates.io package
fltk
pkg:cargo/fltk
Vulnerabilities (3)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2021-28308 | Cri | 9.1 | < 0.15.3 | 0.15.3 | Mar 12, 2021 | An issue was discovered in the fltk crate before 0.15.3 for Rust. There is an out-of bounds read because the pixmap constructor lacks pixmap input validation. | |
| CVE-2021-28307 | Hig | 7.5 | < 0.15.3 | 0.15.3 | Mar 12, 2021 | An issue was discovered in the fltk crate before 0.15.3 for Rust. There is a NULL pointer dereference during attempted use of a non-raster image for a window icon. | |
| CVE-2021-28306 | Hig | 7.5 | < 0.15.3 | 0.15.3 | Mar 12, 2021 | An issue was discovered in the fltk crate before 0.15.3 for Rust. There is a NULL pointer dereference during attempted use of a multi label type if the image is nonexistent. |
- affected < 0.15.3fixed 0.15.3
An issue was discovered in the fltk crate before 0.15.3 for Rust. There is an out-of bounds read because the pixmap constructor lacks pixmap input validation.
- affected < 0.15.3fixed 0.15.3
An issue was discovered in the fltk crate before 0.15.3 for Rust. There is a NULL pointer dereference during attempted use of a non-raster image for a window icon.
- affected < 0.15.3fixed 0.15.3
An issue was discovered in the fltk crate before 0.15.3 for Rust. There is a NULL pointer dereference during attempted use of a multi label type if the image is nonexistent.