CVE-2026-55406

Name of the Vulnerable Software and Affected Versions Buffa versions prior to 0.7.0

Description A soundness bug in the OwnedView<V> type allows safe Rust code to trigger a use-after-free. The OwnedView::decode() constructor transmutes a borrowed slice to &'static [u8], and the Deref implementation exposes this promoted 'static lifetime on borrowed view fields, such as &'static str and &'static [u8], to callers. Consequently, the borrow checker allows these references to outlive the OwnedView. When the OwnedView is dropped and its backing buffer is freed, the references become dangling, which can lead to memory corruption, information disclosure of freed heap contents, and cross-thread misuse.

Recommendations Update to version 0.7.0.