PT-2026-96195

OwnedAlloc::drop in place destroys the contained value by hand, then commits the ownership transfer with mem::forgetself — which lives inside into raw and so runs only after the destruction. T::drop is user code and may panic. If it does, the forget is skipped and the still-live OwnedAlloc unwind...

CVE-2021-29931

An issue was discovered in the arenavec crate through 2021-01-12 for Rust. A double drop can sometimes occur upon a panic in T::drop...

CVE-2021-29931

An issue was discovered in the arenavec crate through 2021-01-12 for Rust. A double drop can sometimes occur upon a panic in T::drop...

CVE-2021-29931

The CVE concerns the arenavec crate for Rust (up to at least 0.1.1 per OSV entry; affecters mention Rust versions up to 2021-01-12). Root cause: panics in T::drop() (and related paths) can cause double drop or memory management issues, leading to memory corruption. Documented impacts include doub...

CVE-2021-29931: Double Free

An issue was discovered in the arenavec crate through 2021-01-12 for Rust. A double drop can sometimes occur upon a panic in T::drop...

RUSTSEC-2021-0053 'merge_sort::merge()' crashes with double-free for `T: Drop`

In the affected versions of this crate, mergesort::merge wildly duplicates and drops ownership of T without guarding against double-free. Due to such implementation, simply invoking mergesort::merge on Vec can cause double free bugs...

'merge_sort::merge()' crashes with double-free for `T: Drop`

In the affected versions of this crate, mergesort::merge wildly duplicates and drops ownership of T without guarding against double-free. Due to such implementation, simply invoking mergesort::merge on Vec can cause double free bugs...

PT-2021-19620

Name of the Vulnerable Software and Affected Versions: algorithmica crate through 2021-03-07 Description: The issue is related to a double free in the merge sort::merge function. In the affected versions of the algorithmica crate, merge sort::merge duplicates and drops ownership of T without...

PT-2021-18544

Name of the Vulnerable Software and Affected Versions arenavec crate through 2021-01-12 arenavec crate through 0.1.1 Description An issue was discovered in the arenavec crate where affected versions did not guard against potential panics that may happen from user-provided functions T::default and...