Servo Smallvec vulnerabilities

5 vulnerabilities

Known vulnerabilities in Servo Smallvec, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2018-20991Crates.Iosmallvec+3
EPSS score
1.85%
An issue was discovered in the smallvec crate before 0.6.3 for Rust. The Iterator implementation mishandles destructors, leading to a double free.7.5CVE-2018-25023Crates.Iosmallvec+3
EPSS score
1.42%
An issue was discovered in the smallvec crate before 0.6.13 for Rust. It can create an uninitialized value of any type, including a reference type.9.8CVE-2021-25900Crates.Iosmallvec+7
EPSS score
1.72%
An issue was discovered in the smallvec crate before 0.6.14 and 1.x before 1.6.1 for Rust. There is a heap-based buffer overflow in SmallVec::insert_many.9.8CVE-2019-15554Crates.Iosmallvec+2
EPSS score
2.14%
An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is memory corruption for certain grow attempts with less than the current capacity.9.8CVE-2019-15551Crates.Iosmallvec+2
EPSS score
1.86%
An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is a double free for certain grow attempts with the current capacity.