https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:12:26.153137+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-57212 EUVD-2026-57212 2026-10-03T15:12:26.229843+00:00 EUVD-2026-57212 https://cve.radiocsirt.org/vuln/fkie_cve-2019-15551 fkie_cve-2019-15551 2026-10-03T15:12:26.229880+00:00

An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is a double free for certain grow attempts with the current capacity.

 https://cve.radiocsirt.org/vuln/ghsa-mm7v-vpv8-xfc3 GHSA-mm7v-vpv8-xfc3 — Double free in smallvec 2026-10-03T15:12:26.229912+00:00

Affected: crates.io: smallvec

Attempting to call grow on a spilled SmallVec with a value equal to the current capacity causes it to free the existing data. This performs a double free immediately and may lead to use-after-free on subsequent accesses to the SmallVec contents. An attacker that controls the value passed to grow may exploit this flaw to obtain memory contents or gain remote code execution.

 https://cve.radiocsirt.org/vuln/gsd-2019-15551 gsd-2019-15551 2026-10-03T15:12:26.229936+00:00 gsd-2019-15551 https://cve.radiocsirt.org/vuln/rustsec-2019-0009 RUSTSEC-2019-0009 — Double-free and use-after-free in SmallVec::grow() 2026-10-03T15:12:26.229948+00:00

Affected: crates.io: smallvec

Attempting to call `grow` on a spilled SmallVec with a value equal to the current capacity causes it to free the existing data. This performs a double free immediately and may lead to use-after-free on subsequent accesses to the SmallVec contents.

An attacker that controls the value passed to `grow` may exploit this flaw to obtain memory contents or gain remote code execution.

Credits to [@ehuss](https://github.com/ehuss) for discovering, reporting and fixing the bug.