Lucene search

K
rustsecRustsecRUSTSEC-2021-0039
HistoryJan 04, 2021 - 12:00 p.m.

panic in user-provided `Endian` impl triggers double drop of T

2021-01-0412:00:00
rustsec.org
6

0.001 Low

EPSS

Percentile

46.5%

Affected versions of the crate does not guard against panic from user-provided impl of Endian trait, which is a safe trait that users can implement.
If a user-provided implementation of the Endian trait panics, double-drop is triggered due to the duplicated ownership of T created by ptr::read().

Double-drop (or double free) can cause memory corruption in the heap.

CPENameOperatorVersion
endian_traiteqany

0.001 Low

EPSS

Percentile

46.5%

Related for RUSTSEC-2021-0039