Vulnerability CVE-2020-36318
Published: 2021-04-11

Description:
In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than once under certain condition. This bug could result in a use-after-free or double free.

 References:
https://github.com/rust-lang/rust/issues/79808
https://github.com/rust-lang/rust/pull/79814
Copyright 2024, cxsecurity.com

 

Back to Top