Skip to content

Product

crates.io stackvector vulnerabilities

2 published CVES affecting crates.io stackvector, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
1
Medium
0
Low
0
Unscored
1
CISA KEV
0

Latest crates.io stackvector CVEs

Newest publication first

  1. RUSTSEC-2025-0166 Multiple soundness issues in `stackvector`

    Published
    Unknown

    Affected versions of stackvector contained multiple soundness issues that could allow safe Rust code to trigger undefined behavior. One issue was that StackVec::length was exposed as a public field. Safe Rust code could set length to a value larger than the backing array capacity...

  2. CVE-2021-29939 Out of bounds write in stackvector

    Published
    HighCVSS 7.3

    An issue was discovered in the stackvector crate through 2021-02-19 for Rust. There is an out-of-bounds write in StackVec::extend if size_hint provides certain anomalous data.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.