critical9.8
CVE-2020-35862
Use after free and double free in bitvec
Impact
An issue was discovered in the bitvec crate before 0.17.4 for Rust. BitVec to BitBox conversion leads to a use-after-free or double free.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| rust | bitvec | >= 0.11.0, < 0.17.4 | 0.17.4 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bitvec Project | Bitvec | before 0.17.4 |