3500 matches found
Memory corruption
An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is memory corruption for certain grow attempts with less than the current capacity...
Design/Logic Flaw
An issue was discovered in the libflate crate before 0.1.25 for Rust. MultiDecoder::read has a use-after-free, leading to arbitrary code execution...
CVE-2019-15552
An issue was discovered in the libflate crate before 0.1.25 for Rust. MultiDecoder::read has a use-after-free, leading to arbitrary code execution...
CVE-2019-15552
An issue was discovered in the libflate crate before 0.1.25 for Rust. MultiDecoder::read has a use-after-free, leading to arbitrary code execution...
CVE-2019-15551
CVE-2019-15551 concerns the Rust smallvec crate prior to 0.6.10. The issue is a double free when growing a SmallVec whose current capacity matches the growth size, potentially enabling use-after-free conditions. Documents from multiple sources (GHSA advisory, Red Hat, SUSE, OSV, Debian, and NVD) ...
CVE-2019-15551
An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is a double free for certain grow attempts with the current capacity...
CVE-2019-15551
An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is a double free for certain grow attempts with the current capacity...
CVE-2019-15554
An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is memory corruption for certain grow attempts with less than the current capacity...
CVE-2019-15554
An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is memory corruption for certain grow attempts with less than the current capacity...
CVE-2019-15553
An issue was discovered in the memoffset crate before 0.5.0 for Rust. offsetof and spanof can cause exposure of uninitialized memory...
CVE-2019-15553
An issue was discovered in the memoffset crate before 0.5.0 for Rust. offsetof and spanof can cause exposure of uninitialized memory...
CVE-2019-15550
An issue was discovered in the simd-json crate before 0.1.15 for Rust. There is an out-of-bounds read and an incorrect crossing of a page boundary...
CVE-2019-15550
The CVE-2019-15550 issue affects the simd-json crate for Rust (before 0.1.15). The root cause is an out-of-bounds read caused by memory access that can cross a page boundary during string parsing, risking segmentation faults and service crashes. Several sources (OSV, GHSA/GitHub advisories, Red H...
CVE-2018-21000
An issue was discovered in the safe-transmute crate before 0.10.1 for Rust. A constructor's arguments are in the wrong order, causing heap memory corruption...
CVE-2018-21000
An issue was discovered in the safe-transmute crate before 0.10.1 for Rust. A constructor's arguments are in the wrong order, causing heap memory corruption...
CVE-2018-20999
An issue was discovered in the orion crate before 0.11.2 for Rust. reset calls cause incorrect results...
CVE-2018-20999
CVE-2018-20999 affects the Rust crate orion (before version 0.11.2). The issue arises from reset() calls that can produce incorrect results by mishandling streaming state. The root cause is that the state could be reset without ensuring proper finalization, leading to corrupted streaming state an...
CVE-2018-20991
The CVE-2018-20991 issue affects the Rust smallvec crate up to version 0.6.3. The root cause is an Iterator implementation that mishandles destructors, which can lead to a double free. This vulnerability is documented as affecting smallvec prior to 0.6.3, with multiple advisories (OSV, NVD) confi...
