-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
RustRust| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| xmp_toolkit | rust | < 1.9.0 | 1.9.0 |
Miggo AIRoot Cause AnalysisThe vulnerability centers around the XmpFile::close method as explicitly stated in all references. The advisory notes this function's failure to handle C++ exceptions properly, which is critical in Rust<->C++ FFI interactions. The fix in PR #232 specifically targeted this function by adding exception handling, and the new try_close API was introduced as a safe alternative. While exact file paths aren't shown in the advisory, Rust convention suggests xmp_file.rs as the logical location for XmpFile implementation. The high confidence comes from multiple corroborating sources: GHSA description, issue #230 reproduction, and the explicit fix in PR #232.
KEV Misses 88% of Exploited CVEs- Get the report