← All advisories

Critical severityNVD Advisory· Published Aug 26, 2019· Updated Aug 5, 2024

CVE-2018-20991

CVE-2018-20991

Description

An issue was discovered in the smallvec crate before 0.6.3 for Rust. The Iterator implementation mishandles destructors, leading to a double free.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
smallveccrates.io	>= 0.3.2, < 0.6.3	0.6.3

Affected products

3

Rust/smallvecdescription
ghsa-coords2 versions
pkg:cargo/smallvec pkg:rpm/suse/librsvg&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP2
>= 0.3.2, < 0.6.3+ 1 more
- (no CPE)range: >= 0.3.2, < 0.6.3
- (no CPE)range: < 2.42.9-3.6.1

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-rxr4-x558-x7hwghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2018-20991ghsaADVISORY
github.com/servo/rust-smallvec/issues/96ghsaWEB
rustsec.org/advisories/RUSTSEC-2018-0003.htmlghsax_refsource_MISCWEB

News mentions

0

No linked articles in our index yet.