Reported

February 26, 2026

Issued

February 27, 2026

Package

hivex (crates.io)

Type

INFO Unsound

Keywords

#double-free #use-after-free #undefined-behavior

References

• https://codeberg.org/1millibyte/toolsnt/issues/18

Patched

• >=0.2.1

Affected Functions

Version

hivex::Hive::close

• =0.2.0

hivex::Hive::from_handle

• =0.2.0

Description

Drop implementation for Hive did perform free, but so did Hive::close, which, at the end of the scope performed Drop, therefore triggering double-free.

Additionally, function Hive::from_handle was not marked as unsafe, making it, in combination with as_handle easy to clone and trigger double-free in safe code or triggering UB when using invalid pointer.

Advisory available under CC0-1.0 license.