rustsec/advisory-db
1
0
Fork 0
mirror of https://github.com/rustsec/advisory-db.git synced 2025-12-27 01:54:07 -05:00
Code Issues Packages Projects Releases Wiki Activity
Files
main
advisory-db/rust/std/CVE-2020-36318.md
Yechan Bae 22b59ea8a3 Add std CVE (#869)
2021-04-13 14:22:28 -07:00

523 B
Raw Permalink Blame History 

[advisory]
id = "CVE-2020-36318"
package = "std"
categories = ["memory-corruption"]
date = "2020-12-07"
url = "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36318"

[versions]
patched = [">= 1.49.0"]
unaffected = ["< 1.48.0"]

VecDeque::make_contiguous may duplicate the contained elements

In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than once under certain condition. This bug could result in a use-after-free or double free.