« List of all CVEs

CVE-2020-36323

Published: 4/14/2021 Last updated: 8/4/2024 Reserved: 4/14/2021

In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialized bytes to be exposed (or the program to crash) if the borrowed string changes after its length is checked.

CNA assigner: mitre (8254265b-2729-46b6-b9e3-3dfca2d5bfca) Requested by: n/a

Opam packages affected (6)

conf-rust conf-rust-2018 conf-rust-2021 conf-rust-2024 conf-rust-llvm conf-rust-wasm

Products affected (1)

Product Vendor Version
n/a n/a All versions < V3.0

References (14)