CVE-2021-28306: Fltk Project Fltk

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

An issue was discovered in the fltk crate before 0.15.3 for Rust. There is a NULL pointer dereference during attempted use of a multi label type if the image is nonexistent.

Affected products

• Fltk Project Fltk: before 0.15.3 (fixed in 0.15.3)

Published 2021-03-12. Last modified 2026-06-17.