Buffer Overflow Vulnerability in Rust Standard Library

CVE-2018-1000657

Summary

The Rust standard library's std::collections::vec_deque::VecDeque::reserve() function is susceptible to a Buffer Overflow vulnerability. This flaw may allow for arbitrary code execution under certain conditions. The issue affects Rust version 1.3.0 and later, and was rectified following a specific commit. However, no proof-of-concept exploit has been published, indicating a potential risk area within applications relying on the affected versions.

References