Lucene search
+L

7 matches found

Github Security Blog
Github Security Blog
•added 2021/08/25 8:47 p.m.•38 views

Use after free and double free in bitvec

An issue was discovered in the bitvec crate before 0.17.4 for Rust. BitVec to BitBox conversion leads to a use-after-free or double free...

9.8CVSS8.9AI score0.01649EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2020/12/31 10:15 a.m.•19 views

CVE-2020-35862

An issue was discovered in the bitvec crate before 0.17.4 for Rust. BitVec to BitBox conversion leads to a use-after-free or double free...

9.8CVSS7.3AI score0.01649EPSS
SaveExploits1References1
Mend
Mend
•added 2020/12/31 8:29 a.m.•1 views

CVE-2020-35862

An issue was discovered in the bitvec crate before 0.17.4 for Rust. BitVec to BitBox conversion leads to a use-after-free or double free...

9.8CVSS0.01649EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2020/12/31 12:00 a.m.•22 views

Rust Resource Management Error Vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in bitvec crate before 0.17.4 for Rust, which stems from a BitVec to BitBox conversion resulting in use-after-free or double free...

9.8CVSS5.8AI score0.01649EPSS
SaveExploits1References2
OSV
OSV
•added 2020/03/27 12:00 p.m.•64 views

RUSTSEC-2020-0007 use-after or double free of allocated memory

Conversion of BitVec to BitBox did not account for allocation movement. The flaw was corrected by using the address after resizing, rather than the original base address...

9.8CVSS9.4AI score0.01649EPSS
SaveExploits1References3
RustSec
RustSec
•added 2020/03/27 12:00 p.m.•31 views

use-after or double free of allocated memory

Conversion of BitVec to BitBox did not account for allocation movement. The flaw was corrected by using the address after resizing, rather than the original base address...

9.8CVSS3.5AI score0.01649EPSS
SaveExploits1Affected Software1
Positive Technologies
Positive Technologies
•added 2020/03/27 12:00 a.m.•1 views

PT-2020-17494

Name of the Vulnerable Software and Affected Versions bitvec crate versions prior to 0.17.4 Description The issue arises from the conversion of BitVec to BitBox, which can lead to a use-after-free or double free. This occurs because the conversion did not account for allocation movement, using th...

9.8CVSS0.01649EPSS
SaveExploits1References9
Rows per page
Query Builder