Vulnerabilities > CVE-2021-29939 - Out-of-bounds Write vulnerability in Stackvector Project Stackvector

CVSS 7.3 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

LOW

network

low complexity

stackvector-project

CWE-787

NVD

Published: 2021-04-01

Updated: 2024-02-14

Summary

An issue was discovered in the stackvector crate through 2021-02-19 for Rust. There is an out-of-bounds write in StackVec::extend if size_hint provides certain anomalous data.

Vulnerable Configurations

Part	Description	Count
Application	Stackvector_Project Stackvector Project Stackvector - Stackvector Project Stackvector 1.0.0 Stackvector Project Stackvector 1.0.1 Stackvector Project Stackvector 1.0.2 Stackvector Project Stackvector 1.0.3 Stackvector Project Stackvector 1.0.4 Stackvector Project Stackvector 1.0.5 Stackvector Project Stackvector 1.0.6 Stackvector Project Stackvector 1.0.7 Stackvector Project Stackvector 1.0.8	10

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

References

https://rustsec.org/advisories/RUSTSEC-2021-0048.html