~ / search / GHSA-75cq-g75g-rxff

GHSA-75cq-g75g-rxff

use-after-free vulnerability in Rust array-queue

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-35900

Packages

EcosystemPackageAffectedFixed in
crates.io array-queue >= 0.3.0, <= 0.3.3 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in the array-queue crate through 2020-09-26 for Rust. A pop_back() call may lead to a use-after-free.

References

External links from the advisory. They lead to third-party sites.