Описание
Double-Free / Use-After-Free (UAF) in the IntoIter::drop and ThinVec::clear functions in the thin_vec crate. A panic in ptr::drop_in_place skips setting the length to zero.
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:mozilla:thin-vec:0.2.15:*:*:*:*:rust:*:*
EPSS
Процентиль: 7%
0.00168
Низкий
5.1 Medium
CVSS3
7.3 High
CVSS3
Дефекты
CWE-415
CWE-1341
Связанные уязвимости
CVSS3: 5.1
ubuntu
3 месяца назад
Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVec::clear` functions in the thin_vec crate. A panic in `ptr::drop_in_place` skips setting the length to zero.
CVSS3: 7.3
redhat
3 месяца назад
Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVec::clear` functions in the thin_vec crate. A panic in `ptr::drop_in_place` skips setting the length to zero.
CVSS3: 5.1
debian
3 месяца назад
Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVe ...
CVSS3: 7.3
github
4 месяца назад
thin-vec: Use-After-Free and Double Free in IntoIter::drop When Element Drop Panics
EPSS
Процентиль: 7%
0.00168
Низкий
5.1 Medium
CVSS3
7.3 High
CVSS3
Дефекты
CWE-415
CWE-1341