lowVulnerability
GHSA-j39j-6gw9-jw6h
If the Buf struct is dereferenced immediately after calling new() or default() on the Buf struct, a null pointer is passed to the unsafe function slice::from_raw_parts. According to the safety section documentation of the function, data must be non-null and aligned even for zero-length slices or slices of ZSTs. Thus, passing a null pointer will lead to undefined behavior.
Properties
- ghsa_id
- GHSA-j39j-6gw9-jw6h
- severity
- low
- summary
- git2 has potential undefined behavior when dereferencing Buf struct
- cve_id
- GHSA-j39j-6gw9-jw6h
- is_ghsa_only
- true
- ghsa_published
- 2026-02-04T20:36:04Z
- source_url
- https://github.com/advisories/GHSA-j39j-6gw9-jw6h
- ghsa_updated
- 2026-02-04T20:36:07Z
Related Entities (3)
AFFECTS (1)
→[Software]rust/git2
HAS_WEAKNESS (1)
→[Weakness]NULL Pointer Dereference
REPORTED_BY (1)
→[Source]GitHub Advisory Database
Explore deeper with Ninja Signal's threat intelligence graph