CVE-2018-25023

  • Last update: Dec 8, 2023

Description

An issue was discovered in the smallvec crate before 0.6.13 for Rust. It can create an uninitialized value of any type, including a reference type.

Software From Fixed in
servo / smallvec - 0.6.13
smallvec - 0.6.13

Details

CVSS v3

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CVSS v2

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:N/I:P/A:N

CWEs