CVE-2020-36318: Double Free
Published Apr 11, 2021
·Updated
In the standard library in Rust before 1.49.0, VecDeque::makecontiguous has a bug that pops the same element more than once under certain condition. This bug could result in a use-after-free or double free.
Affected Software
1 affected component
rust-lang Rust>=1.48.0<1.49.0
Remediation
Patch Available
Patch Available
Event History
Apr 11, 2021
CVE Published
via MITRE·07:05 PM
Data Sourced
via MITRE·07:05 PM
Description
Frequently Asked Questions
1
What is CVE-2020-36318?
CVE-2020-36318 is a vulnerability in the standard library in Rust before version 1.49.0, which can result in a use-after-free or double free.
2
How severe is CVE-2020-36318?
CVE-2020-36318 has a severity score of 9.8 (critical).
3
How does CVE-2020-36318 affect Rust?
CVE-2020-36318 affects Rust versions before 1.49.0.
4
What is the CWE ID of CVE-2020-36318?
CVE-2020-36318 is associated with CWE IDs 416 and 415.
5
How can I mitigate CVE-2020-36318?
To mitigate CVE-2020-36318, it is recommended to update Rust to version 1.49.0 or later.