Double Free Vulnerability in Smallvec Crate for Rust
CVE-2019-15551

9.8CRITICAL

Key Information:

Vendor

Servo

Status
Smallvec
Vendor
CVE Published:
26 August 2019

What is CVE-2019-15551?

A double free vulnerability was identified in the smallvec crate for Rust, affecting versions prior to 0.6.10. This issue arises during specific grow operations when the current capacity is reached, leading to potential memory corruption and instability in applications utilizing the affected crate. Developers using smallvec should upgrade to the latest version to mitigate the risks associated with this vulnerability.

References

https://rustsec.org/advisories/RUSTSEC-2019-0009.html
x_refsource_MISC
https://github.com/servo/rust-smallvec/issues/148
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.