Skip to content

Product

crates.io maligned vulnerabilities

1 published CVE affecting crates.io maligned, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
0
Low
0
Unscored
1
CISA KEV
0

Latest crates.io maligned CVEs

Newest publication first

  1. GHSA-wm8x-php5-hvq6 Maligned causes incorrect deallocation

    Published
    Unknown

    maligned::align_first manually allocates with an alignment larger than T, and then uses Vec::from_raw_parts on that allocation to get a Vec<T>. GlobalAlloc::dealloc requires that the layout argument must be the same layout that was used to allocate that block of memory. When deal...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.