← All advisories

Critical severity9.8NVD Advisory· Published Dec 31, 2020· Updated Jun 17, 2026

CVE-2020-35895

CVE-2020-35895

Description

An issue was discovered in the stack crate before 0.3.1 for Rust. ArrayVec has an out-of-bounds write via element insertion.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
stackcrates.io	< 0.3.1	0.3.1

Affected products

3

Stack Project/Stack
cpe:2.3:a:stack_project:stack:*:*:*:*:*:rust:*:*
Range: <0.3.1
Rust/stackdescription
ghsa-coords
pkg:cargo/stack
Range: < 0.3.1

Patches

Vulnerability mechanics

References

5

github.com/advisories/GHSA-h45v-vgvp-3h5vghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2020-35895ghsaADVISORY
rustsec.org/advisories/RUSTSEC-2020-0042.htmlnvdThird Party AdvisoryWEB
github.com/arcnmx/stack-rs/commit/369e55736f9bd29c37b1712afc2923f4028148c6ghsaWEB
github.com/arcnmx/stack-rs/issues/4ghsaWEB

News mentions

0

No linked articles in our index yet.