CVE-2024-27284

Summary

CVE-2024-27284 affects the cassandra-rs library, which is a Cassandra (CQL) driver for Rust. This vulnerability arises when a user tries to access an item from an iterator after it has already been advanced to the next item. As a result, memory that was previously in use is freed, leading to undefined behavior. This issue has been resolved in version 3.0.0 of the cassandra-rs library.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.