https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 11:00:03 +0000 https://vulnerability.circl.lu/vuln/rustsec-2025-0126 <p><strong>Affected:</strong> crates.io: nftnl</p> <p>A heap-buffer-overflow vulnerability exists in the Rust wrapper for libnftnl, triggered via the nftnl::Batch::with_page_size constructor. When a small or malformed page size is provided, the underlying C code allocates an insufficient buffer, leading to out-of-bounds writes during batch initialization.</p> <p>The flaw was fixed in commit 94a286f by adding an overflow check: ```Rust batch_page_size .checked_add(crate::nft_nlmsg_maxsize()) .expect(&#34;batch_page_size is too large and would overflow&#34;); ```</p> <p>## Mitigation</p> <p>Upgrade to version `0.9.0` or later, which aborts instead.</p> <p><strong>Affected:</strong> crates.io: nftnl</p> <p>A heap-buffer-overflow vulnerability exists in the Rust wrapper for libnftnl, triggered via the nftnl::Batch::with_page_size constructor. When a small or malformed page size is provided, the underlying C code allocates an insufficient buffer, leading to out-of-bounds writes during batch initialization.</p> <p>The flaw was fixed in commit 94a286f by adding an overflow check: ```Rust batch_page_size .checked_add(crate::nft_nlmsg_maxsize()) .expect(&#34;batch_page_size is too large and would overflow&#34;); ```</p> <p>## Mitigation</p> <p>Upgrade to version `0.9.0` or later, which aborts instead.</p> https://vulnerability.circl.lu/vuln/rustsec-2025-0126