PT-2021-17716 · Toodee · Toodee
Published
2021-02-19
·
Updated
2021-09-01
·
CVE-2021-28028
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
toodee versions prior to 0.3.0
Description:
An issue in the toodee crate for Rust can cause a double free upon an iterator panic when inserting rows from an iterator at a particular index. This happens because toodee shifts items over, duplicating their ownership, and the space reserved for new elements is based on the len() returned by the ExactSizeIterator. If the iterator panics, elements in the array can be freed twice. Additionally, uninitialized or previously freed elements can be exposed if the len() does not match the number of elements.
Recommendations:
For versions prior to 0.3.0, update to version 0.3.0 or later to fix the issue. As a temporary workaround, consider adding assertions on the number of elements returned by the iterator to prevent potential double free errors. Restrict the use of the row-insertion feature until the update is applied to minimize the risk of exploitation.
Fix
Use of Uninitialized Resource
Double Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Toodee