Slab · Slab · CVE-2025-55159
Name of the Vulnerable Software and Affected Versions:
slab versions prior to 0.4.11
Description:
slab is a pre-allocated storage for a uniform data type. In version 0.4.10, the `get disjoint mut` function incorrectly checked if indices were within the slab's capacity instead of its length, potentially allowing access to uninitialized memory. This could lead to undefined behavior or potential crashes.
Recommendations:
Update to slab version 0.4.11 or later.
Avoid using `get disjoint mut` with indices that might be beyond the slab's actual length.