Out-of-bounds read In smallbitvec
Description
smallbitvec is a growable bit-vector for Rust, optimized for size. From 1.0.1 to 2.6.0, an integer overflow in the internal capacity calculation of smallbitvec can lead to an undersized heap allocation, resulting in a heap buffer overflow through safe APIs only. This allows memory corruption without requiring unsafe code from the caller. This vulnerability is fixed in 2.6.1.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 cargo | 2.6.1 | ||
 debian 12 | - | ||
debian 13 | - | ||
debian 14 | 2.6.1-1 |
Aliases
1. 2. 3. 4. 5. 6. 7.
References
1.