CVE-2021-45681: Derive-Com-Impl Project Derive-Com-Impl

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

An issue was discovered in the derive-com-impl crate before 0.1.2 for Rust. An invalid reference (and memory corruption) can occur because AddRef might not be called before returning a pointer.

Affected products

• Derive-Com-Impl Project Derive-Com-Impl: before 0.1.2 (fixed in 0.1.2)

Published 2021-12-27. Last modified 2026-06-17.