Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Vurich

#25306de 53,633
9.8CVSS total
Vulnerabilidades · 1
PT-2018-15484
9.8
2018-07-19
Rust · Smallvec · CVE-2018-20991
**Name of the Vulnerable Software and Affected Versions** smallvec versions prior to 0.6.3 **Description** An issue in the smallvec crate for Rust was discovered, where the Iterator implementation mishandles destructors, potentially leading to a double free. This occurs when an iterator passed to `SmallVec::insert many` panics in `Iterator::next`, causing destructors to run during unwinding while the vector is in an inconsistent state. **Recommendations** For versions prior to 0.6.3, update to version 0.6.3 to resolve the issue. As a temporary workaround, consider avoiding the use of `SmallVec::insert many` with iterators that may panic in `Iterator::next` until the update is applied.