CVE-2021-45680

Name of the Vulnerable Software and Affected Versions: vec-const crate versions prior to 2.0.0

Description: The issue arises from attempting to construct a Vec from a pointer to a const slice, leading to memory corruption. The affected versions of the crate claimed to construct a const Vec with nonzero length and capacity, but this is not possible because such a Vec requires a pointer from an allocator. The implementation was later changed to construct a std::borrow::Cow.

Recommendations: For versions prior to 2.0.0, update to version 2.0.0 or later to resolve the issue. As a temporary workaround, consider avoiding the construction of a const Vec with nonzero length and capacity until the update is applied.