Lucene search
RustsecRUSTSEC-2020-0145HistoryNov 02, 2020 - 12:00 p.m.
Use-after-free when cloning a partially consumed `Vec` iterator
2020-11-0212:00:00
rustsec.org
7
0.001 Low
EPSS
Percentile
45.7%
The IntoIter Clone implementation clones the whole underlying Vec.
If the iterator is partially consumed the consumed items will be copied, thus creating a use-after-free access.
A proof of concept is available in the original bug report.
Related
nvd
nvd
CVE-2020-36464
2021-08-08 06:15:08
prion
prion
Design/Logic Flaw
2021-08-08 06:15:00
osv
osv
Use-after-free when cloning a partially consumed `Vec` iterator
2020-11-02 12:00:00
Use after free in heapless
2021-08-25 20:56:09
CVE-2020-36464
2021-08-08 06:15:08
cve
cve
CVE-2020-36464
2021-08-08 06:15:08
cvelist
cvelist
CVE-2020-36464
2021-08-08 05:12:46
github
github
Use after free in heapless
2021-08-25 20:56:09
cnvd
cnvd
Mozilla Rust Resource Management Error Vulnerability (CNVD-2021-85285)
2021-09-23 00:00:00