CVEvulnerability

CVE-2020-36323

8.2 HIGH Published 2021-04-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-04-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:P
Weaknesses
CWE-134

Description

In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialized bytes to be exposed (or the program to crash) if the borrowed string changes after its length is checked.

Affected configurations

• rust-lang rust (< 1.52.0) • fedoraproject fedora 32 • fedoraproject fedora 33 • fedoraproject fedora 34

Related

Weakness · CWE (1)

  • CWE-134 Use of Externally-Controlled Format String weakness

References