GHSA-mm7v-vpv8-xfc3CriticalCVSS 9.8

Double free in smallvec

Published
August 25, 2021
Last Modified
June 13, 2023

🔗 CVE IDs covered (1)

CVE-2019-15551 →

📋 Description

Attempting to call grow on a spilled SmallVec with a value equal to the current capacity causes it to free the existing data. This performs a double free immediately and may lead to use-after-free on subsequent accesses to the SmallVec contents. An attacker that controls the value passed to grow may exploit this flaw to obtain memory contents or gain remote code execution.

🎯 Affected products1

  • rust/smallvec:>= 0.6.5, < 0.6.10

🔗 References (7)