CVE Vulnerabilities

CVE-2018-20991

Double Free

Published: Aug 26, 2019 | Modified: Nov 21, 2024
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

An issue was discovered in the smallvec crate before 0.6.3 for Rust. The Iterator implementation mishandles destructors, leading to a double free.

Weakness

The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.

Affected Software

Name Vendor Start Version End Version
Smallvec Servo 0.3.2 (including) 0.6.3 (excluding)
Rust-smallvec Ubuntu disco *
Rust-smallvec Ubuntu eoan *
Rust-smallvec Ubuntu groovy *
Rust-smallvec Ubuntu hirsute *
Rust-smallvec Ubuntu impish *
Rust-smallvec Ubuntu kinetic *
Rust-smallvec Ubuntu lunar *
Rust-smallvec Ubuntu mantic *
Rust-smallvec Ubuntu trusty *

Potential Mitigations

References