In the standard library in Rust before 1.52.0, a double free can occur in the Vec::from_iter function if freeing the element panics.
The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Rust | Rust-lang | 1.48.0 (including) | 1.52.0 (excluding) |
| Red Hat Developer Tools | RedHat | rust-toolset-1.52-0:1.52.1-1.el7_9 | * |
| Red Hat Developer Tools | RedHat | rust-toolset-1.52-rust-0:1.52.1-2.el7_9 | * |
| Red Hat Enterprise Linux 8 | RedHat | rust-toolset:rhel8-8040020210603202531.2daa1a95 | * |
| Rustc | Ubuntu | bionic | * |
| Rustc | Ubuntu | esm-apps/xenial | * |
| Rustc | Ubuntu | esm-infra-legacy/trusty | * |
| Rustc | Ubuntu | focal | * |
| Rustc | Ubuntu | groovy | * |
| Rustc | Ubuntu | hirsute | * |
| Rustc | Ubuntu | impish | * |
| Rustc | Ubuntu | jammy | * |
| Rustc | Ubuntu | kinetic | * |
| Rustc | Ubuntu | trusty | * |
| Rustc | Ubuntu | trusty/esm | * |
| Rustc | Ubuntu | upstream | * |
| Rustc | Ubuntu | xenial | * |