PT-2026-40740 · Crates.Io · Auto Vec
Published
2026-05-02
·
Updated
2026-05-02
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
The
iter() and iter mut() APIs compute
current = (&children[0] as *const *const RawAutoChild).sub(1), which
performs pointer subtraction going before the start of the allocation. This
is undefined behavior per Rust's pointer arithmetic rules.This can be triggered through safe public APIs —
iter() and iter mut()
— with no unsafe required from the caller. Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Auto Vec