cve.bz

CVE-2018-25023

7.5 highEPSS 1.4%

An issue was discovered in the smallvec crate before 0.6.13 for Rust. It can create an uninitialized value of any type, including a reference type.

Severity

CVSS 3.1

7.5 high
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWE
CWE-908
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-55m5-whcv-c49ccrates.iosmallvec<0.6.130.6.13
GHSA-66p5-j55p-32r9crates.iosmallvec<0.6.130.6.13
RUSTSEC-2018-0018crates.iosmallvec>=0.0.0-0 <0.6.130.6.13

References

Check your stackJSON