Skip to content

Product

crates.io auto_vec vulnerabilities

1 published CVE affecting crates.io auto_vec, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
0
Low
0
Unscored
1
CISA KEV
0

Latest crates.io auto_vec CVEs

Newest publication first

  1. RUSTSEC-2026-0133 Invalid pointer arithmetic in `iter()` and `iter_mut()`

    Published
    Unknown

    The iter() and iter_mut() APIs compute current = (&children[0] as *const *const RawAutoChild).sub(1), which performs pointer subtraction going before the start of the allocation. This is undefined behavior per Rust's pointer arithmetic rules. This can be triggered through safe pu...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.