high7.5
CVE-2018-25023
An issue was discovered in the smallvec crate before 0.6.13 for Rust.
Impact
An issue was discovered in the smallvec crate before 0.6.13 for Rust. It can create an uninitialized value of any type, including a reference type.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Servo | Smallvec | before 0.6.13 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/servo/rust-smallvec/commit/e64afc8c473d43e375ab42bd33db2d0d4ac4e41b
- https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/smallvec/RUSTSEC-2018-0018.md
- https://rustsec.org/advisories/RUSTSEC-2018-0018.html
- https://github.com/servo/rust-smallvec/commit/e64afc8c473d43e375ab42bd33db2d0d4ac4e41b
- https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/smallvec/RUSTSEC-2018-0018.md
- https://rustsec.org/advisories/RUSTSEC-2018-0018.html