CVEvulnerability
CVE-2020-36464
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-08-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-416
Description
An issue was discovered in the heapless crate before 0.6.1 for Rust. The IntoIter Clone implementation clones an entire underlying Vec without considering whether it has already been partially consumed.
Affected configurations
• heapless project heapless (< 0.6.1)
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
References
- https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/heapless/RUSTSEC-2020-0145.md Third Party Advisory
- https://rustsec.org/advisories/RUSTSEC-2020-0145.html Exploit, Issue Tracking, Patch, Third Party Advisory
- https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/heapless/RUSTSEC-2020-0145.md Third Party Advisory
- https://rustsec.org/advisories/RUSTSEC-2020-0145.html Exploit, Issue Tracking, Patch, Third Party Advisory