critical9.8
CVE-2020-36318
In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than once under certain condition.
Impact
In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than once under certain condition. This bug could result in a use-after-free or double free.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rust-Lang | Rust | from 1.48.0 before 1.49.0 |