CVE-2019-16144
Description
An issue was discovered in the generator crate before 0.6.18 for Rust. Uninitialized memory is used by Scope, done, and yield_ during API calls.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
The generator crate for Rust before 0.6.18 uses uninitialized memory in Scope, done, and yield_ APIs, leading to potential memory corruption.
Description
The generator crate for Rust (version before 0.6.18) suffers from unsound APIs that use uninitialized memory in the Scope, done, and yield_ functions [1][3]. This leads to undefined behavior (UB) and potential memory corruption, as reported in GitHub issue #9 and #14 [2].
Exploitation
An attacker can trigger the vulnerability by calling the affected APIs in any application that uses the generator crate. The CVSS vector is AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, indicating a network attack vector with low complexity and no required privileges or user interaction [3]. This makes it exploitable remotely without authentication.
Impact
Successful exploitation can cause a denial of service (availability impact) due to memory corruption. There is no direct impact on confidentiality or integrity, but UB can lead to unpredictable behavior [3].
Mitigation
The issue is fixed in generator crate version 0.6.18 and later [3]. Users should update to the latest patched version.
AI Insight generated on May 22, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
generatorcrates.io | < 0.6.18 | 0.6.18 |
Affected products
2- Rust/generator cratedescription
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7- github.com/advisories/GHSA-6c65-xcf5-299xghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2019-16144ghsaADVISORY
- github.com/Xudong-Huang/generator-rs/issues/11ghsaWEB
- github.com/Xudong-Huang/generator-rs/issues/13ghsaWEB
- github.com/Xudong-Huang/generator-rs/issues/14ghsaWEB
- github.com/Xudong-Huang/generator-rs/issues/9ghsax_refsource_MISCWEB
- rustsec.org/advisories/RUSTSEC-2019-0020.htmlghsax_refsource_MISCWEB
News mentions
0No linked articles in our index yet.