IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-04-20 11:16

MODIFIED

2026-04-20 11:16

EPSS (Prob. Exploit)

0.17%

Top 93.8%

DATA SOURCES:

NVD 🔗 2026-04-20 RED HAT 🔗 2026-04-26 FIRST EPSS 🔗 2026-11-08 GITHUB 🔗 2026-11-05 OSV 🔗 2026-11-02

> DESCRIPTION

Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVec::clear` functions in the thin_vec crate. A panic in `ptr::drop_in_place` skips setting the length to zero.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> RED HAT SEVERITY ASSESSMENT

THREAT SEVERITY

Important

> GITHUB SECURITY ADVISORY

GHSA-xphw-cqx3-667j HIGH

thin-vec: Use-After-Free and Double Free in IntoIter::drop When Element Drop Panics

AFFECTED PACKAGES:

RUST / thin-vec

< 0.2.16

Fixed in: 0.2.16

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

Use-After-Free and Double-Free in IntoIter::drop when element drop panics

AFFECTED PACKAGES:

Unknown / Unknown

2 versions affected

ALIASES:

GHSA-xphw-cqx3-667j, RUSTSEC-2026-0103

> HISTORIQUE DES MODIFICATIONS

Première apparition

20/04/2026 11:16

Source: NVD

📊 ENRICHISSEMENT 26/04/2026 05:02

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

N/A

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }