RUSTSEC-2025-0167 `Bitmap::try_from(&[u8])` can create invalid values

The TryFrom implementation for Bitmap copies the input bytes into an uninitialized backing store and calls assumeinit without validating that the bytes form a valid value of the backing store type. For SIZE = 1 the backing store is a bool, so any input byte other than 0x00 or 0x01 produces an...

EUVD-2021-1617

Malware in sbrugna...

CVE-2020-35862

An issue was discovered in the bitvec crate before 0.17.4 for Rust. BitVec to BitBox conversion leads to a use-after-free or double free...

Fedora: Security Advisory for rust-bitvec_helpers (FEDORA-2024-ce2936b568)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: rust-bitvec_helpers-3.1.4-1.fc40

BitVec based bitstream reader and writer...

Use after free and double free in bitvec

An issue was discovered in the bitvec crate before 0.17.4 for Rust. BitVec to BitBox conversion leads to a use-after-free or double free...

GHSA-7CJC-HVXF-GQH7 Use after free and double free in bitvec

An issue was discovered in the bitvec crate before 0.17.4 for Rust. BitVec to BitBox conversion leads to a use-after-free or double free...

CVE-2020-35862

An issue was discovered in the bitvec crate before 0.17.4 for Rust. BitVec to BitBox conversion leads to a use-after-free or double free...

CVE-2020-35862

An issue was discovered in the bitvec crate before 0.17.4 for Rust. BitVec to BitBox conversion leads to a use-after-free or double free...

Double free

An issue was discovered in the bitvec crate before 0.17.4 for Rust. BitVec to BitBox conversion leads to a use-after-free or double free...

CVE-2020-35862

An issue was discovered in the bitvec crate before 0.17.4 for Rust. BitVec to BitBox conversion leads to a use-after-free or double free...

CVE-2020-35862

An issue was discovered in the bitvec crate before 0.17.4 for Rust. BitVec to BitBox conversion leads to a use-after-free or double free...

CVE-2020-35862

The CVE-2020-35862 issue affects the bitvec crate for Rust (pre-0.17.4). The vulnerability arises in BitVec to BitBox conversion, causing use-after-free or double-free due to allocation movement during that conversion. The problem is documented across multiple sources (RustSec/RUSTSEC-2020-0007, ...

CVE-2020-35862: Double Free

An issue was discovered in the bitvec crate before 0.17.4 for Rust. BitVec to BitBox conversion leads to a use-after-free or double free...

Rust Resource Management Error Vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in bitvec crate before 0.17.4 for Rust, which stems from a BitVec to BitBox conversion resulting in use-after-free or double free...

RUSTSEC-2020-0007 use-after or double free of allocated memory

Conversion of BitVec to BitBox did not account for allocation movement. The flaw was corrected by using the address after resizing, rather than the original base address...

use-after or double free of allocated memory

Conversion of BitVec to BitBox did not account for allocation movement. The flaw was corrected by using the address after resizing, rather than the original base address...

PT-2020-17494

Name of the Vulnerable Software and Affected Versions bitvec crate versions prior to 0.17.4 Description The issue arises from the conversion of BitVec to BitBox, which can lead to a use-after-free or double free. This occurs because the conversion did not account for allocation movement, using th...