Skip to content
OpenAdvisories

Package · Debian

rust-thin-vec

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.1
    CVE-2026-6654

    Use-After-Free and Double-Free in IntoIter::drop when element drop panics

    Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVec::clear` functions in the thin_vec crate. A panic in `ptr::drop_in_place` skips setting the length to zero.

    Mozilla thin-vec rust-thin-vec thin-vec Debian Ubuntu crates.io