Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Cad97

#26822of 56,329
9.8Total CVSS
Vulnerabilities · 1
PT-2019-14535
9.8
2019-05-21
Rust · Compact Arena Crate · CVE-2019-16139
**Name of the Vulnerable Software and Affected Versions** compact arena crate versions prior to 0.4.0 **Description** An issue in the compact arena crate for Rust involves the mishandling of generativity, leading to potential out-of-bounds writes or reads. The affected versions did not properly implement generativity because invariant lifetimes were not necessarily dropped. This allows an attacker to mix up two arenas, using indices created from one arena with another, potentially leading to out-of-bounds read or write access into the memory reserved for the arena. **Recommendations** For versions prior to 0.4.0, update to version 0.4.0 to resolve the issue, as it correctly implements generativity.