crates.io/heapless CVE-2020-36464: high 7.5, EPSS 1.23%
Use-after-free when cloning a partially consumed `Vec` iterator
Action: Upgrade heapless to 0.6.1 or later.
cargo update -p heapless --precise 0.6.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-0 | 0.6.1 | - |
Fixed versions
| 0.6.1 |
Sources
- osv: RUSTSEC-2020-0145
- https://crates.io/crates/heapless
- https://rustsec.org/advisories/RUSTSEC-2020-0145.html
- https://github.com/japaric/heapless/issues/181
CVE-2020-36464 · published · modified · JSON