PT-2021-16833

Name of the Vulnerable Software and Affected Versions glsl-layout crate versions prior to 0.4.0 Description An issue was discovered in the glsl-layout crate where a panic occurring within the user-provided function f 2nd parameter of fn map array causes a double drop of a single object. This...

PT-2021-16837

Name of the Vulnerable Software and Affected Versions basic dsp matrix crate versions prior to 0.9.2 Description An issue was discovered in the basic dsp matrix crate where a double drop can be performed when a TransformContent panic occurs. This happens because affected versions of the crate did...

RUSTSEC-2021-0011 EventList's From<EventList> conversions can double drop on panic.

Affected versions of this crate read from a container using ptr::read in From, and then call a user specified Into function. This issue can result in a double-free if the user provided function panics...

RUSTSEC-2021-0039 panic in user-provided `Endian` impl triggers double drop of T

Affected versions of the crate does not guard against panic from user-provided impl of Endian trait, which is a safe trait that users can implement. If a user-provided implementation of the Endian trait panics, double-drop is triggered due to the duplicated ownership of T created by ptr::read...

panic in user-provided `Endian` impl triggers double drop of T

Affected versions of the crate does not guard against panic from user-provided impl of Endian trait, which is a safe trait that users can implement. If a user-provided implementation of the Endian trait panics, double-drop is triggered due to the duplicated ownership of T created by ptr::read...

EventList's From<EventList> conversions can double drop on panic.

Affected versions of this crate read from a container using ptr::read in From, and then call a user specified Into function. This issue can result in a double-free if the user provided function panics...

PT-2021-18542

Name of the Vulnerable Software and Affected Versions endian trait crate through 2021-01-04 Description The issue arises when a user-provided implementation of the Endian trait panics, triggering a double-drop due to duplicated ownership of T created by ptr::read. This double-drop can cause memor...

WS-2021-0065

All versions of the crate 'endiantrait' are affected and does not guard against panic from user-provided impl of Endian trait, which is a safe trait that users can implement. If a user-provided implementation of the Endian trait panics, double-drop is triggered due to the duplicated ownership of ...

RUSTSEC-2020-0105 Update unsound DrainFilter and RString::retain

Affected versions of this crate contained code from the Rust standard library that contained soundness bugs rust-lang/rust60977 double drop & rust-lang/rust78498 create invalid utf-8 string. The flaw was corrected in v0.9.1 by making a similar fix to the one made in the Rust standard library...

PT-2020-17585

Name of the Vulnerable Software and Affected Versions abi stable crate versions prior to 0.9.1 Description The issue concerns soundness bugs in the abi stable crate for Rust, where a retain call can create an invalid UTF-8 string and DrainFilter lacks soundness due to a double drop. These bugs ar...

PT-2020-17584

Name of the Vulnerable Software and Affected Versions abi stable crate versions prior to 0.9.1 Description The issue is related to soundness bugs in the abi stable crate for Rust, specifically due to a double drop in DrainFilter and the potential creation of an invalid UTF-8 string. This could le...