Vendor/product archive

mozilla / thin-vec CVEs

Beta · best-effort

1 CVEs tagged to mozilla / thin-vec — 0 Critical, 0 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to mozilla vendor archive

CVE-2026-6654

Published Apr 20, 2026

Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVec::clear` functions in the thin_vec crate. A panic in `ptr::drop_in_place` skips setting the length to zero.

CVSS 5.1 · Medium

evidence mentions: 4
Buzz score: 29.1

Vendor/product tagsBeta · best-effort

Showing 1-1 of 1 CVEsPage 1 of 1