CVE-2019-15554Critical· 9.8▾ MidnightMemory corruption in SmallVec::grow()
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 53.9 · likelihood 0.4 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 17.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
2.1%
Attempting to call grow on a spilled SmallVec with a value less than the current capacity causes corruption of memory allocator data structures.
An attacker that controls the value passed to grow may exploit this flaw to obtain memory contents or gain remote code execution.
Credits to @ehuss for discovering, reporting and fixing the bug.
smallvec >= 0.6.3, < 0.6.10Upgrade to a patched release:
smallvec 0.6.10Connected by shared product, vendor, weakness, or advisory.
CVE-2021-25900Critical· 9.8Buffer overflow in SmallVec::insert_many
CVE-2019-15551Critical· 9.8Double-free and use-after-free in SmallVec::grow()
CVE-2018-20991Critical· 9.8Possible double free during unwinding in SmallVec::insert_many