Lucene search

K
osvGoogleOSV:GHSA-JH37-772X-4HPW
HistoryAug 25, 2021 - 9:01 p.m.

Double free in algorithmica

2021-08-2521:01:52
Google
osv.dev
5

0.001 Low

EPSS

Percentile

42.6%

An issue was discovered in the algorithmica crate through 2021-03-07 for Rust. In the affected versions of this crate, merge_sort::merge() wildly duplicates and drops ownership of T without guarding against double-free. Due to such implementation, simply invoking merge_sort::merge() on Vec<T: Drop> can cause double free bugs.

CPENameOperatorVersion
algorithmicale0.1.8

0.001 Low

EPSS

Percentile

42.6%

Related for OSV:GHSA-JH37-772X-4HPW