~ / search / GHSA-7cjc-hvxf-gqh7

GHSA-7cjc-hvxf-gqh7

Use after free and double free in bitvec

Source: GitHub Advisory Database (reviewed) Critical CVE-2020-35862

Packages

EcosystemPackageAffectedFixed in
crates.io bitvec >= 0.11.0, < 0.17.4 0.17.4

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in the bitvec crate before 0.17.4 for Rust. BitVec to BitBox conversion leads to a use-after-free or double free.

References

External links from the advisory. They lead to third-party sites.