Lucene search

K
osvGoogleOSV:RUSTSEC-2021-0053
HistoryMar 07, 2021 - 12:00 p.m.

'merge_sort::merge()' crashes with double-free for `T: Drop`

2021-03-0712:00:00
Google
osv.dev
4

0.001 Low

EPSS

Percentile

42.6%

In the affected versions of this crate, merge_sort::merge() wildly duplicates and drops ownership of T without guarding against double-free. Due to such implementation,
simply invoking merge_sort::merge() on Vec<T: Drop> can cause double free bugs.

0.001 Low

EPSS

Percentile

42.6%

Related for OSV:RUSTSEC-2021-0053