In the standard library in Rust before 1.52.0, a double free can occur in the Vec::from_iter function if freeing the element panics.
The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Rust | Rust-lang | 1.48.0 (including) | 1.52.0 (excluding) |