lowVulnerability

GHSA-j39j-6gw9-jw6h

If the Buf struct is dereferenced immediately after calling new() or default() on the Buf struct, a null pointer is passed to the unsafe function slice::from_raw_parts. According to the safety section documentation of the function, data must be non-null and aligned even for zero-length slices or slices of ZSTs. Thus, passing a null pointer will lead to undefined behavior.

Properties

ghsa_id
GHSA-j39j-6gw9-jw6h
severity
low
summary
git2 has potential undefined behavior when dereferencing Buf struct
cve_id
GHSA-j39j-6gw9-jw6h
is_ghsa_only
true
ghsa_published
2026-02-04T20:36:04Z
source_url
https://github.com/advisories/GHSA-j39j-6gw9-jw6h
ghsa_updated
2026-02-04T20:36:07Z

Related Entities (3)

AFFECTS (1)

[Software]rust/git2

HAS_WEAKNESS (1)

[Weakness]NULL Pointer Dereference

REPORTED_BY (1)

[Source]GitHub Advisory Database

Explore deeper with Ninja Signal's threat intelligence graph

GHSA-j39j-6gw9-jw6h — Ninja Signal Threat Intelligence | Ninja Signal