An issue was discovered in the derive-com-impl crate before 0.1.2 for Rust. An invalid reference (and memory corruption) can occur because AddRef might not be called before returning a pointer.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-45681.json"
[ { "events": [ { "introduced": "0" }, { "fixed": "0.1.2" } ] } ]