GitHub Advisoryadvisory · crates.io

GHSA-qgwf-r2jj-2ccv Use after free in heapless

HIGH Published 2021-08-25 Modified 2021-08-18 Official page ↗
Aliases
CVE-2020-36464
Ecosystem
crates.io
Packages
heapless
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-416
Reviewed
2021-08-18

Affected packages

• crates.io heapless: < 0.6.1 → fixed in 0.6.1

Description

An issue was discovered in the heapless crate before 0.6.1 for Rust. The IntoIter Clone implementation clones an entire underlying Vec without considering whether it has already been partially consumed.

Related

Alias · CVE (1)

  • CVE-2020-36464 An issue was discovered in the heapless crate before 0.6.1 for Rust. vulnerability

Weakness · CWE (1)

References