Lucene search
+L

9 matches found

Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•7 views

PT-2026-96195

OwnedAlloc::drop in place destroys the contained value by hand, then commits the ownership transfer with mem::forgetself — which lives inside into raw and so runs only after the destruction. T::drop is user code and may panic. If it does, the forget is skipped and the still-live OwnedAlloc unwind...

6.2AI score
SaveExploits0References4
Mend
Mend
•added 2021/04/01 4:24 a.m.•9 views

CVE-2021-29931

An issue was discovered in the arenavec crate through 2021-01-12 for Rust. A double drop can sometimes occur upon a panic in T::drop...

8.7CVSS0.00973EPSS
SaveExploits0References4
CVE
CVE
•added 2021/04/01 4:24 a.m.•117 views

CVE-2021-29931

The CVE concerns the arenavec crate for Rust (up to at least 0.1.1 per OSV entry; affecters mention Rust versions up to 2021-01-12). Root cause: panics in T::drop() (and related paths) can cause double drop or memory management issues, leading to memory corruption. Documented impacts include doub...

7.5CVSS7.4AI score0.00973EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/04/01 4:24 a.m.•47 views

CVE-2021-29931

An issue was discovered in the arenavec crate through 2021-01-12 for Rust. A double drop can sometimes occur upon a panic in T::drop...

7.7AI score0.00973EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/01 12:00 a.m.•4 views

CVE-2021-29931: Double Free

An issue was discovered in the arenavec crate through 2021-01-12 for Rust. A double drop can sometimes occur upon a panic in T::drop...

7.5CVSS5.8AI score0.00973EPSS
SaveExploits0References2
osv_rustsec
osv_rustsec
•added 2021/03/07 12:00 p.m.•35 views

RUSTSEC-2021-0053 'merge_sort::merge()' crashes with double-free for `T: Drop`

In the affected versions of this crate, mergesort::merge wildly duplicates and drops ownership of T without guarding against double-free. Due to such implementation, simply invoking mergesort::merge on Vec can cause double free bugs...

7.5CVSS7.4AI score0.00961EPSS
SaveExploits0References3
RustSec
RustSec
•added 2021/03/07 12:00 p.m.•28 views

'merge_sort::merge()' crashes with double-free for `T: Drop`

In the affected versions of this crate, mergesort::merge wildly duplicates and drops ownership of T without guarding against double-free. Due to such implementation, simply invoking mergesort::merge on Vec can cause double free bugs...

7.5CVSS3.4AI score0.00961EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/03/07 12:00 a.m.•2 views

PT-2021-19620

Name of the Vulnerable Software and Affected Versions: algorithmica crate through 2021-03-07 Description: The issue is related to a double free in the merge sort::merge function. In the affected versions of the algorithmica crate, merge sort::merge duplicates and drops ownership of T without...

7.5CVSS0.00961EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2021/01/12 12:00 a.m.•5 views

PT-2021-18544

Name of the Vulnerable Software and Affected Versions arenavec crate through 2021-01-12 arenavec crate through 0.1.1 Description An issue was discovered in the arenavec crate where affected versions did not guard against potential panics that may happen from user-provided functions T::default and...

7.5CVSS6AI score0.00973EPSS
SaveExploits0References12
Rows per page
Query Builder