{"id":"CVE-2018-25001","aliases":["GHSA-6gvc-4jvj-pwq4","GHSA-f56g-chqp-22m9","RUSTSEC-2018-0020"],"url":"https://o3.security/vulnerability/CVE-2018-25001","summary":"Duplicate Advisory: Use after free in libpulse-binding","details":"## Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-f56g-chqp-22m9. This link is maintained to preserve external references.\n\n## Original Description\nAn issue was discovered in the libpulse-binding crate before 2.5.0 for Rust. proplist::Iterator can cause a use-after-free.","published":"2020-12-31T10:15:13.020Z","modified":"2026-10-24T10:30:41.358225119Z","cvss":{"score":6.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":1,"affectedPackages":[{"ecosystem":"crates.io","name":"libpulse-binding","fixedVersion":"2.5.0"}],"fix":null,"references":[{"type":"EVIDENCE","url":"https://rustsec.org/advisories/RUSTSEC-2018-0020.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-25001"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-6gvc-4jvj-pwq4"},{"type":"PACKAGE","url":"https://github.com/jnqnfe/pulse-binding-rust"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-10-24T10:30:41.358225119Z"}}