Lucene search
K

12 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 6:30 p.m.4 views

CVE-2021-29939

An issue was discovered in the stackvector crate through 2021-02-19 for Rust. There is an out-of-bounds write in StackVec::extend if sizehint provides certain anomalous data...

7.5CVSS6.9AI score0.00765EPSS
Exploits1References1
OSV
OSV
added 2021/08/25 8:54 p.m.13 views

GHSA-VCW4-8PH6-7VW8 Use after free in Rocket

Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop,...

7.3CVSS7AI score0.0041EPSS
Exploits1References6
Github Security Blog
Github Security Blog
added 2021/08/25 8:54 p.m.24 views

Use after free in Rocket

Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop,...

7.5CVSS6.8AI score0.0041EPSS
Exploits1References6Affected Software1
CNVD
CNVD
added 2021/04/02 12:0 a.m.6 views

Rust Out-of-Bounds Write Vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust on 2021-02-19 and earlier versions, which stems from an out-of-bounds write in StackVec::extend that could result in an out-of-bounds write if certain exception data is...

7.5CVSS7.5AI score0.00765EPSS
Exploits1References1
OSV
OSV
added 2021/04/01 5:15 a.m.2 views

DEBIAN-CVE-2021-29939

An issue was discovered in the stackvector crate through 2021-02-19 for Rust. There is an out-of-bounds write in StackVec::extend if sizehint provides certain anomalous data...

7.3CVSS7.3AI score0.00765EPSS
Exploits1References1
Cvelist
Cvelist
added 2021/04/01 4:23 a.m.14 views

CVE-2021-29939

An issue was discovered in the stackvector crate through 2021-02-19 for Rust. There is an out-of-bounds write in StackVec::extend if sizehint provides certain anomalous data...

7.5AI score0.00765EPSS
Exploits1References1
Debian CVE
Debian CVE
added 2021/04/01 4:23 a.m.13 views

CVE-2021-29939

An issue was discovered in the stackvector crate through 2021-02-19 for Rust. There is an out-of-bounds write in StackVec::extend if sizehint provides certain anomalous data...

7.5CVSS7.2AI score0.00765EPSS
Exploits1
CNNVD
CNNVD
added 2021/04/01 12:0 a.m.2 views

Rust 缓冲区错误漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust on 2021-02-19 and earlier versions, which stems from an out-of-bounds write in StackVec::extend that could result in an out-of-bounds write if certain exception data is...

7.5CVSS6.3AI score0.00765EPSS
Exploits1References2
OSV
OSV
added 2021/02/19 12:0 p.m.16 views

RUSTSEC-2021-0048 StackVec::extend can write out of bounds when size_hint is incorrect

StackVec::extend used the lower and upper bounds from an Iterator's sizehint to determine how many items to push into the stack based vector. If the sizehint implementation returned a lower bound that was larger than the upper bound, StackVec would write out of bounds and overwrite memory on the...

7.3CVSS7.2AI score0.00765EPSS
Exploits1References3
RustSec
RustSec
added 2021/02/19 12:0 p.m.22 views

StackVec::extend can write out of bounds when size_hint is incorrect

StackVec::extend used the lower and upper bounds from an Iterator's sizehint to determine how many items to push into the stack based vector. If the sizehint implementation returned a lower bound that was larger than the upper bound, StackVec would write out of bounds and overwrite memory on the...

7.5CVSS2.8AI score0.00765EPSS
Exploits1Affected Software1
RustSec
RustSec
added 2021/02/09 12:0 p.m.21 views

Use after free possible in `uri::Formatter` on panic

Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop,...

7.5CVSS1.2AI score0.0041EPSS
Exploits1Affected Software1
OSV
OSV
added 2021/02/09 12:0 p.m.16 views

RUSTSEC-2021-0044 Use after free possible in `uri::Formatter` on panic

Affected versions of this crate transmuted a &str to a &'static str before pushing it into a StackVec, this value was then popped later in the same function. This was assumed to be safe because the reference would be valid while the method's stack was active. In between the push and the pop,...

7.3CVSS7AI score0.0041EPSS
Exploits1References3
Rows per page
Query Builder