Out of bounds access in compact_arena

Affected versions of this crate did not properly implement the generativity, because the invariant lifetimes were not necessarily dropped. This allows an attacker to mix up two arenas, using indices created from one arena with another one. This might lead to an out-of-bounds read or write access...

CVE-2019-16139

An issue was discovered in the compactarena crate before 0.4.0 for Rust. Generativity is mishandled, leading to an out-of-bounds write or read...

CVE-2019-16139

An issue was discovered in the compactarena crate before 0.4.0 for Rust. Generativity is mishandled, leading to an out-of-bounds write or read...

CVE-2019-16139

The CVE-2019-16139 issue affects the Rust crate compact_arena prior to 0.4.0, where flawed generativity handling allowed an out-of-bounds write or read. Exploitation involves mixing indices between arenas, enabling memory access violations. The root cause is improper generativity implementation; ...