Reported

September 26, 2020

Issued

October 1, 2020 (last modified: June 13, 2023)

Package

array-queue (crates.io)

Type

Vulnerability

Keywords

#memory-corruption #uninitialized-memory #use-after-free

Aliases

• CVE-2020-35900
• GHSA-75cq-g75g-rxff

References

• https://github.com/raviqqe/array-queue/issues/2

CVSS Score

5.5 MEDIUM

CVSS Details

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality Impact

High

Integrity Impact

None

Availability Impact

None

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Patched

no patched versions

Unaffected

• <0.3.0

Description

array_queue implements a circular queue that wraps around an array. However, it fails to properly index into the array in the pop_back function allowing the reading of previously dropped or uninitialized memory.

Advisory available under CC0-1.0 license.