In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than once under certain condition. This bug could result in a use-after-free or double free.
The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Rust | Rust-lang | 1.48.0 (including) | 1.49.0 (excluding) |
| Red Hat Developer Tools | RedHat | rust-toolset-1.49-0:1.49.0-1.el7_9 | * |
| Red Hat Developer Tools | RedHat | rust-toolset-1.49-rust-0:1.49.0-1.el7_9 | * |
| Red Hat Enterprise Linux 8 | RedHat | rust-toolset:rhel8-8040020210113215649.bd734dca | * |
| Rustc | Ubuntu | esm-apps/xenial | * |
| Rustc | Ubuntu | esm-infra-legacy/trusty | * |
| Rustc | Ubuntu | groovy | * |
| Rustc | Ubuntu | hirsute | * |
| Rustc | Ubuntu | trusty | * |
| Rustc | Ubuntu | trusty/esm | * |
| Rustc | Ubuntu | upstream | * |
| Rustc | Ubuntu | xenial | * |