Lucene search
+L

3 matches found

RustSec
RustSec
•added 2026/09/21 12:00 p.m.•15 views

Double free / use-after-free in `Consumer::skip` and `Consumer::clear` when an element's `Drop` panics

Consumer::skip and Consumer::clear are not panic-safe. They drop the consumed elements in place and only afterwards call advancereadindex to move the ring buffer's read index past them. If an element's Drop panics mid-loop, advancereadindex is never reached, so the read index still points at the...

6.3AI score
SaveExploits0Affected Software1
OSV
OSV
•added 2026/09/21 12:00 p.m.•13 views

RUSTSEC-2026-0293 Double free / use-after-free in `Consumer::skip` and `Consumer::clear` when an element's `Drop` panics

Consumer::skip and Consumer::clear are not panic-safe. They drop the consumed elements in place and only afterwards call advancereadindex to move the ring buffer's read index past them. If an element's Drop panics mid-loop, advancereadindex is never reached, so the read index still points at the...

6.3AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/21 12:00 a.m.•3 views

PT-2026-105964

Consumer::skip and Consumer::clear are not panic-safe. They drop the consumed elements in place and only afterwards call advance read index to move the ring buffer's read index past them. If an element's Drop panics mid-loop, advance read index is never reached, so the read index still points at...

6.2AI score
SaveExploits0References4
Rows per page
Query Builder