GHSA-j8cj-hw74-64jv Hive has Double-free and Use After Free Vulnerabilities
A double-free and use-after-free vulnerability in the Rust Hive library allows attackers to cause crashes or execute arbitrary code via unsafe API misuse.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Not stated
- Victim action needed
- Not needed
- Fix
- Available
What is GHSA-j8cj-hw74-64jv?
GHSA-j8cj-hw74-64jv is an use after free vulnerability in hivex, published on 26 Feb 2026.
Official description
Drop implementation for Hive did perform free, but so did Hive::close, which, at the end of the scope performed Drop, therefore triggering double-free.
Additionally, function Hive::from_handle was not marked as unsafe, making it, in combination with as_handle easy to clone and trigger double-free in safe code or triggering UB when using invalid pointer.
Which versions are affected by GHSA-j8cj-hw74-64jv?
3 open source packages ship an affected version, including hivex.
| Package | Affected | Fixed in |
|---|---|---|
hivex crates.io | From 0.0.0-0 | 0.2.1 |
hivex crates.io | From 0.2.0 | 0.2.1 |
hivex crates.io | From 0.2.0 | 0.2.1 |
How do I fix GHSA-j8cj-hw74-64jv?
Upgrade hivex to 0.2.1 or later.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is GHSA-j8cj-hw74-64jv being exploited?
There is no known exploitation of GHSA-j8cj-hw74-64jv in the wild and no public exploit code.
Sources
Also known as RUSTSEC-2026-0029.