CVE-2019-16882

7.5 highEPSS 1.5%

An issue was discovered in the string-interner crate before 0.7.1 for Rust. It allows attackers to read from memory locations associated with dangling pointers, because of a cloning flaw.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWE: CWE-416
Published: 2019-09-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

string-interner_project:string-interner

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-49fq-pw77-6qxj	crates.io	string-interner	>=0.7.0 <0.7.1	0.7.1
GHSA-49fq-pw77-6qxj	crates.io	string-interner	<0.6.4	0.6.4
RUSTSEC-2019-0023	crates.io	string-interner	>=0.0.0-0 <0.6.4 >=0.7.0-0 <0.7.1	0.6.4, 0.7.1

References

https://rustsec.org/advisories/RUSTSEC-2019-0023.html
https://rustsec.org/advisories/RUSTSEC-2019-0023.html

Check your stack JSON