https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T23:45:48.991422+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-36464 CVE-2020-36464 2026-10-20T23:45:48.993271+00:00

An issue was discovered in the heapless crate before 0.6.1 for Rust. The IntoIter Clone implementation clones an entire underlying Vec without considering whether it has already been partially consumed.

 https://cve.radiocsirt.org/vuln/rustsec-2020-0145 RUSTSEC-2020-0145 — Use-after-free when cloning a partially consumed `Vec` iterator 2026-10-20T23:45:48.993319+00:00

Affected: crates.io: heapless

The `IntoIter` `Clone` implementation clones the whole underlying `Vec`. If the iterator is partially consumed the consumed items will be copied, thus creating a use-after-free access.

A proof of concept is available in the original bug report.