Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Bluss

#35244of 53,625
7.5Total CVSS
Vulnerabilities · 1
PT-2021-8382
7.5
2021-04-11
Rust · Rust · CVE-2015-20001
**Name of the Vulnerable Software and Affected Versions** Rust versions prior to 1.2.0 **Description** The issue arises from the standard library in Rust, where the BinaryHeap is not panic-safe. When the comparison of generic elements inside `sift up` or `sift down range` panics, the binary heap is left in an inconsistent state. This can lead to a drop of zeroed memory as an arbitrary type, resulting in a memory safety violation. **Recommendations** For versions prior to 1.2.0, update to version 1.2.0 or later to resolve the issue.