https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T00:34:40.828920+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-85285 cnvd-2021-85285 2026-10-21T00:34:40.898850+00:00 cnvd-2021-85285 https://cve.radiocsirt.org/vuln/euvd-2026-48220 EUVD-2026-48220 2026-10-21T00:34:40.898906+00:00 EUVD-2026-48220 https://cve.radiocsirt.org/vuln/fkie_cve-2020-36464 fkie_cve-2020-36464 2026-10-21T00:34:40.898928+00:00

An issue was discovered in the heapless crate before 0.6.1 for Rust. The IntoIter Clone implementation clones an entire underlying Vec without considering whether it has already been partially consumed.

 https://cve.radiocsirt.org/vuln/ghsa-qgwf-r2jj-2ccv GHSA-qgwf-r2jj-2ccv — Use after free in heapless 2026-10-21T00:34:40.898971+00:00

Affected: crates.io: heapless

An issue was discovered in the heapless crate before 0.6.1 for Rust. The IntoIter Clone implementation clones an entire underlying Vec without considering whether it has already been partially consumed.

 https://cve.radiocsirt.org/vuln/gsd-2020-36464 gsd-2020-36464 2026-10-21T00:34:40.899023+00:00 gsd-2020-36464 https://cve.radiocsirt.org/vuln/rustsec-2020-0145 RUSTSEC-2020-0145 — Use-after-free when cloning a partially consumed `Vec` iterator 2026-10-21T00:34:40.899047+00:00

Affected: crates.io: heapless

The `IntoIter` `Clone` implementation clones the whole underlying `Vec`. If the iterator is partially consumed the consumed items will be copied, thus creating a use-after-free access.

A proof of concept is available in the original bug report.