Memory Safety Vulnerability in Rust Standard Library's Zip Implementation
CVE-2021-28876
5.3MEDIUM
What is CVE-2021-28876?
The Rust Standard Library prior to version 1.52.0 contains a vulnerability in its Zip implementation that presents a memory safety issue. Specifically, the implementation calls the __iterator_get_unchecked() function multiple times for the same index when the underlying iterator panics under certain conditions. This behavior violates safety requirements associated with the TrustedRandomAccess trait, potentially leading to memory corruption and other unpredictable behavior in applications that rely on the library for manipulation of zip data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
References
CVSS V3.1
Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
