CVE-2021-29930: Out of bounds write in arenavec

August 25, 2021 (updated June 13, 2023)

An issue was discovered in the arenavec crate through 0.1.1. A drop of uninitialized memory can sometimes occur upon a panic in T::default()

References

github.com/advisories/GHSA-327x-39hh-65wf
github.com/ibabushkin/arenavec
github.com/ibabushkin/arenavec/issues/1
nvd.nist.gov/vuln/detail/CVE-2021-29930
rustsec.org/advisories/RUSTSEC-2021-0040.html

Code Behaviors & Features

Detect and mitigate CVE-2021-29930 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →