GitHub Advisoryadvisory · crates.io

GHSA-rccq-j2m7-8fwr Double-free in id-map

CRITICAL Published 2021-08-25 Modified 2023-06-13 Official page ↗
Aliases
CVE-2021-30457
Ecosystem
crates.io
Packages
id-map
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-415
Reviewed
2021-08-19

Affected packages

• crates.io id-map: <= 0.2.1 (no fix yet)

Description

A double free can occur in remove_set upon a panic in a Drop impl. When removing a set of elements, ptr::drop_in_place is called on each of the element to be removed. If the Drop impl of one of these elements panics then the previously dropped elements can be dropped again.

Related

Alias · CVE (1)

  • CVE-2021-30457 An issue was discovered in the id-map crate through 2021-02-26 for Rust. vulnerability

Weakness · CWE (1)

References