{"id":"GHSA-j8cj-hw74-64jv","aliases":["RUSTSEC-2026-0029"],"url":"https://o3.security/vulnerability/GHSA-j8cj-hw74-64jv","summary":"Hive has Double-free and Use After Free Vulnerabilities","details":"`Drop` implementation for `Hive` did perform free, but so did `Hive::close`, which, at the end of the scope performed `Drop`, therefore triggering double-free.\n\nAdditionally, function `Hive::from_handle` was not marked as unsafe, making it, in combination with `as_handle` easy to clone and trigger double-free in safe code or triggering UB when using invalid pointer.","published":"2026-02-28T02:48:45Z","modified":"2026-03-01T06:11:19.337988Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"crates.io","name":"hivex","fixedVersion":"0.2.1"}],"fix":null,"references":[{"type":"WEB","url":"https://codeberg.org/1millibyte/toolsnt/commit/f4c7a0d1fc4a08ce40bb76e447a69a6f383a916e"},{"type":"WEB","url":"https://codeberg.org/1millibyte/toolsnt/issues/18"},{"type":"WEB","url":"https://docs.rs/crate/hivex"},{"type":"WEB","url":"https://docs.rs/crate/hivex/0.2.1/source"},{"type":"WEB","url":"https://rustsec.org/advisories/RUSTSEC-2026-0029.html"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-03-01T06:11:19.337988Z"}}