PT-2026-125063

Published

2026-10-16

·

Updated

2026-10-16

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

DCtx::try clone (experimental feature, deprecated) is a plain copy of the C context. A context owning a dictionary (from load dictionary, ref prefix or init using dict) or a dictionary table (ref ddict with RefMultipleDDicts) ended up with both copies freeing it. A context cloned mid-frame resumed on uninitialized stream state. The clone also silently lost the WindowLogMax limit.
The flaw was corrected by refusing to clone such contexts, and by carrying over the parameters the copy leaves out.
Vendors
Affected products
Related identifiers
RUSTSEC-2026-0404
Found an issue in the description? Have something to add? Feel free to write us 👾