CVE-2015-20001

Name of the Vulnerable Software and Affected Versions Rust versions prior to 1.2.0

Description The issue arises from the standard library in Rust, where the BinaryHeap is not panic-safe. When the comparison of generic elements inside sift up or sift down range panics, the binary heap is left in an inconsistent state. This can lead to a drop of zeroed memory as an arbitrary type, resulting in a memory safety violation.

Recommendations For versions prior to 1.2.0, update to version 1.2.0 or later to resolve the issue.