https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 16:54:15 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-57212 EUVD-2026-57212 https://cve.radiocsirt.org/vuln/euvd-2026-57212 https://cve.radiocsirt.org/vuln/fkie_cve-2019-15551 <p>An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is a double free for certain grow attempts with the current capacity.</p> <p>An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is a double free for certain grow attempts with the current capacity.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-15551 https://cve.radiocsirt.org/vuln/ghsa-mm7v-vpv8-xfc3 <p><strong>Affected:</strong> crates.io: smallvec</p> <p>Attempting to call grow on a spilled SmallVec with a value equal to the current capacity causes it to free the existing data. This performs a double free immediately and may lead to use-after-free on subsequent accesses to the SmallVec contents. An attacker that controls the value passed to grow may exploit this flaw to obtain memory contents or gain remote code execution.</p> <p><strong>Affected:</strong> crates.io: smallvec</p> <p>Attempting to call grow on a spilled SmallVec with a value equal to the current capacity causes it to free the existing data. This performs a double free immediately and may lead to use-after-free on subsequent accesses to the SmallVec contents. An attacker that controls the value passed to grow may exploit this flaw to obtain memory contents or gain remote code execution.</p> https://cve.radiocsirt.org/vuln/ghsa-mm7v-vpv8-xfc3 https://cve.radiocsirt.org/vuln/gsd-2019-15551 gsd-2019-15551 https://cve.radiocsirt.org/vuln/gsd-2019-15551 https://cve.radiocsirt.org/vuln/rustsec-2019-0009 <p><strong>Affected:</strong> crates.io: smallvec</p> <p>Attempting to call `grow` on a spilled SmallVec with a value equal to the current capacity causes it to free the existing data. This performs a double free immediately and may lead to use-after-free on subsequent accesses to the SmallVec contents.</p> <p>An attacker that controls the value passed to `grow` may exploit this flaw to obtain memory contents or gain remote code execution.</p> <p>Credits to [@ehuss](https://github.com/ehuss) for discovering, reporting and fixing the bug.</p> <p><strong>Affected:</strong> crates.io: smallvec</p> <p>Attempting to call `grow` on a spilled SmallVec with a value equal to the current capacity causes it to free the existing data. This performs a double free immediately and may lead to use-after-free on subsequent accesses to the SmallVec contents.</p> <p>An attacker that controls the value passed to `grow` may exploit this flaw to obtain memory contents or gain remote code execution.</p> <p>Credits to [@ehuss](https://github.com/ehuss) for discovering, reporting and fixing the bug.</p> https://cve.radiocsirt.org/vuln/rustsec-2019-0009