Lucene search

K
osvGoogleOSV:CVE-2020-36318
HistoryApr 11, 2021 - 8:15 p.m.

CVE-2020-36318

2021-04-1120:15:12
Google
osv.dev
6
rust
standard library
bug
vecdeque
make contiguous
use-after-free
double free

AI Score

6.7

Confidence

Low

EPSS

0.003

Percentile

70.3%

In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than once under certain condition. This bug could result in a use-after-free or double free.