CVE-2022-21658

CVE-2022-21658 affects Rust’s std::fs::remove_dir_all, due to a race condition (CWE-363) that could allow an attacker to trick a privileged process into deleting files/directories outside the target. Affected Rust releases: 1.0.0–1.58.0; patch released in 1.58.1. Impact can be significant for pri...

CVE-2015-20001

In Rust prior to 1.2.0, the standard library’s BinaryHeap is not panic-safe. If the comparison of generic elements inside sift_up or sift_down_range panics, the heap can be left in an inconsistent state, leading to dropping zeroed memory of an arbitrary type and a memory-safety violation. This CV...

CVE-2018-1000622

CVE-2018-1000622 affects Rust rustdoc: loading plugins from world-writable directories could enable local code execution. AFFECTED: rustdoc versions 0.8 through 1.27.0; exploitation via the --plugin flag without the --plugin-path flag. REMEDY: upgrade to a fixed release (1.27.1 per initial descri...

CVE-2019-16760

CVE-2019-16760 affects Cargo in Rust releases up to 1.25.0, where the package key in Cargo.toml can cause Cargo to download the wrong dependency. This could allow a malicious package to be substituted when building manifests (affecting locally written and crates.io published manifests). The advis...

CVE-2021-28878

CVE-2021-28878 affects the Rust standard library before 1.52.0. The Zip implementation can call __iterator_get_unchecked() more than once for the same index when next_back() and next() are used together, creating a memory-safety vulnerability related to TrustedRandomAccess. Affected releases incl...

CVE-2021-28877

The CVE-2021-28877 issue affects the Rust standard library prior to 1.51.0, where the Zip implementation calls __iterator_get_unchecked() for the same index more than once during nested iteration, creating a memory safety violation related to TrustedRandomAccess. Affected: Rust stdlib (Zip path) ...

CVE-2021-28875

CVE-2021-28875 affects the Rust standard library prior to 1.50.0. In read_to_end(), the return value from Read is not validated in an unsafe context, which can lead to a buffer overflow. Several connected sources corroborate this bug and note the fix involves upgrading Rust to a newer release. Th...

CVE-2020-36317

The CVE-2020-36317 issue affects the Rust standard library prior to 1.49.0, where String::retain() can panic and allow creation of a non-UTF-8 Rust string. This may cause a memory-safety violation when other APIs assume UTF-8 on the same string. Several connected advisories confirm Rust 1.49.0 or...

CVE-2018-1000657

CVE-2018-1000657 overview (Rust std::collections::vec_deque::VecDeque::reserve) : The vulnerability affects the Rust standard library’s VecDeque::reserve() function in Rust releases starting with commit bfa0e1f58a… and prior to the fix. The root cause is a buffer overrun that can lead to Arbitrar...