Vulnerabilities > CVE-2020-36464 - Use After Free vulnerability in Heapless Project Heapless

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

heapless-project

CWE-416

NVD

Published: 2021-08-08

Updated: 2024-11-21

Summary

An issue was discovered in the heapless crate before 0.6.1 for Rust. The IntoIter Clone implementation clones an entire underlying Vec without considering whether it has already been partially consumed.

Vulnerable Configurations

Part	Description	Count
Application	Heapless_Project Heapless Project Heapless 0.1.0 Heapless Project Heapless 0.2.0 Heapless Project Heapless 0.2.1 Heapless Project Heapless 0.2.2 Heapless Project Heapless 0.2.3 Heapless Project Heapless 0.2.4 Heapless Project Heapless 0.2.5 Heapless Project Heapless 0.2.6 Heapless Project Heapless 0.2.7 Heapless Project Heapless 0.3.0 Heapless Project Heapless 0.3.1 Heapless Project Heapless 0.3.2 Heapless Project Heapless 0.3.3 Heapless Project Heapless 0.3.4 Heapless Project Heapless 0.3.5 Heapless Project Heapless 0.3.6 Heapless Project Heapless 0.3.7 Heapless Project Heapless 0.4.0 Heapless Project Heapless 0.4.1 Heapless Project Heapless 0.4.2 Heapless Project Heapless 0.4.3 Heapless Project Heapless 0.4.4 Heapless Project Heapless 0.5.0 Heapless Project Heapless 0.5.1 Heapless Project Heapless 0.5.2 Heapless Project Heapless 0.5.3 Heapless Project Heapless 0.5.4 Heapless Project Heapless 0.5.5 Heapless Project Heapless 0.5.6 Heapless Project Heapless 0.6.0	32

Common Weakness Enumeration (CWE)

CWE-416 - Use After Free

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References