CVE-2020-35900

Name of the Vulnerable Software and Affected Versions array-queue crate through 2020-09-26

Description The issue arises from the pop back function in the array-queue crate, which fails to properly index into the array. This allows the reading of previously dropped or uninitialized memory, potentially leading to a use-after-free scenario. The array-queue crate implements a circular queue that wraps around an array.

Recommendations For array-queue crate through 2020-09-26, consider disabling the pop back function until a patch is available to prevent potential use-after-free issues. Restrict access to the pop back function to minimize the risk of exploitation.