← All advisories

Critical severity9.8NVD Advisory· Published Aug 26, 2019· Updated Jun 17, 2026

CVE-2019-15551

CVE-2019-15551

Description

An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is a double free for certain grow attempts with the current capacity.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
smallveccrates.io	>= 0.6.5, < 0.6.10	0.6.10

Affected products

3

Servo/Smallvec
cpe:2.3:a:servo:smallvec:*:*:*:*:*:*:*:*
Range: >=0.6.5,<0.6.10
Rust/smallvec cratedescription
ghsa-coords
pkg:cargo/smallvec
Range: >= 0.6.5, < 0.6.10

Patches

Vulnerability mechanics

References

7

github.com/servo/rust-smallvec/issues/148nvdPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-mm7v-vpv8-xfc3ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-15551ghsaADVISORY
rustsec.org/advisories/RUSTSEC-2019-0009.htmlnvdThird Party AdvisoryWEB
github.com/servo/rust-smallvec/commit/c20cfa8584e649f00dc0767ab6fad63a3f59a296ghsaWEB
github.com/servo/rust-smallvec/commit/f96322b9243405cc82701cc73f1b19313b413ab4ghsaWEB
github.com/servo/rust-smallvec/issues/149ghsaWEB

News mentions

0

No linked articles in our index yet.