CVE-2021-25906

Name of the Vulnerable Software and Affected Versions basic dsp matrix crate versions prior to 0.9.2

Description An issue was discovered in the basic dsp matrix crate where a double drop can be performed when a TransformContent panic occurs. This happens because affected versions of the crate did not guard against double drop while temporarily duplicating objects' ownership using ptr::read(). Upon panic in a user-provided function conversion(), objects that are copied by ptr::read() are dropped twice, leading to memory corruption.

Recommendations For basic dsp matrix crate versions prior to 0.9.2, update to version 0.9.2 or later, which uses ManuallyDrop<T> to enclose objects that are to be temporarily duplicated, correcting the flaw.