~ / search / GHSA-55m5-whcv-c49c

GHSA-55m5-whcv-c49c

Use of Uninitialized Resource in smallvec

Source: GitHub Advisory Database (reviewed) High CVE-2018-25023

Packages

EcosystemPackageAffectedFixed in
crates.io smallvec < 0.6.13 0.6.13

Details

As written in the advisory (Markdown source, shown as plain text).

Affected versions of this crate called mem::uninitialized() to create values of a user-supplied type T. This is unsound e.g. if T is a reference type (which must be non-null and thus may not remain uninitialized). The flaw was corrected by avoiding the use of mem::uninitialized(), using MaybeUninit instead.

References

External links from the advisory. They lead to third-party sites.