Memory Safety Vulnerability in Rust Standard Library's Zip Implementation

CVE-2021-28876

Summary

The Rust Standard Library prior to version 1.52.0 contains a vulnerability in its Zip implementation that presents a memory safety issue. Specifically, the implementation calls the __iterator_get_unchecked() function multiple times for the same index when the underlying iterator panics under certain conditions. This behavior violates safety requirements associated with the TrustedRandomAccess trait, potentially leading to memory corruption and other unpredictable behavior in applications that rely on the library for manipulation of zip data.

References