Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Outdated Intaglio Symbol Interner Can Cause Program Crashes
published 3 years ago
Summary
A bug in the Intaglio crate can cause a program to crash if it uses the symbol interner. This can happen when the program tries to access interned contents. To fix this, update to version 1.9.0 or later of the Intaglio crate.
What to do
- Update lopopolo intaglio to version 1.9.0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| rust | lopopolo | intaglio |
< 1.9.0 Fix: upgrade to 1.9.0
|
Original advisory text
Unsoundness in `intern` methods on `intaglio` symbol interners
Affected versions of this crate have a stacked borrows violation when creating
references to interned contents. All interner types are affected.
The flaw was corrected in version 1.9.0 by reordering move and borrowing
operations and storing interned contents by raw pointer instead of as a `Box`.
references to interned contents. All interner types are affected.
The flaw was corrected in version 1.9.0 by reordering move and borrowing
operations and storing interned contents by raw pointer instead of as a `Box`.
Timeline
Published27 Jul 2023
Updated6 Mar 2026
First seen6 Mar 2026
Sources
GHSA-gch5-hwqf-mxhp · GHSA
Track software like this
Free during beta