PT-2026-125058

Published

2026-10-16

·

Updated

2026-10-16

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

CCtx::init using cdict and DCtx::init using ddict (experimental feature, deprecated) took the dictionary as &CDict<'b> and &DDict<'b> with only 'b: 'a, so the dictionary itself could be dropped while the context still pointed at it. The same mistake in other constructors was fixed earlier (https://github.com/gyscos/zstd-rs/issues/365).
The flaw was corrected by taking &'a CDict<'b> and &'a DDict<'b>.
Vendors
Affected products
Related identifiers
RUSTSEC-2026-0399
Found an issue in the description? Have something to add? Feel free to write us 👾