Servo Smallvec
5 CVEs affecting Servo Smallvec. Latest disclosed: 2021-12-27. Critical: 4, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-25900 | Critical | 9.8 | 2021-01-26 | An issue was discovered in the smallvec crate before 0.6.14 and 1.x before 1.6.1 for Rust. There is a heap-based buffer overflow in SmallVec::insert_many. |
CVE-2019-15554 | Critical | 9.8 | 2019-08-26 | An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is memory corruption for certain grow attempts with less than the current capacity. |
CVE-2019-15551 | Critical | 9.8 | 2019-08-26 | An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is a double free for certain grow attempts with the current capacity. |
CVE-2018-20991 | Critical | 9.8 | 2019-08-26 | An issue was discovered in the smallvec crate before 0.6.3 for Rust. The Iterator implementation mishandles destructors, leading to a double free. |
CVE-2018-25023 | High | 7.5 | 2021-12-27 | An issue was discovered in the smallvec crate before 0.6.13 for Rust. It can create an uninitialized value of any type, including a reference type. |