https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 21:36:30 +0000 https://cve.radiocsirt.org/vuln/cve-2019-15551 <p>An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is a double free for certain grow attempts with the current capacity.</p> <p>An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is a double free for certain grow attempts with the current capacity.</p> https://cve.radiocsirt.org/vuln/cve-2019-15551 https://cve.radiocsirt.org/vuln/ghsa-mm7v-vpv8-xfc3 <p><strong>Affected:</strong> crates.io: smallvec</p> <p>Attempting to call grow on a spilled SmallVec with a value equal to the current capacity causes it to free the existing data. This performs a double free immediately and may lead to use-after-free on subsequent accesses to the SmallVec contents. An attacker that controls the value passed to grow may exploit this flaw to obtain memory contents or gain remote code execution.</p> <p><strong>Affected:</strong> crates.io: smallvec</p> <p>Attempting to call grow on a spilled SmallVec with a value equal to the current capacity causes it to free the existing data. This performs a double free immediately and may lead to use-after-free on subsequent accesses to the SmallVec contents. An attacker that controls the value passed to grow may exploit this flaw to obtain memory contents or gain remote code execution.</p> https://cve.radiocsirt.org/vuln/ghsa-mm7v-vpv8-xfc3