CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2021-25900
Critical (9.8) in servo smallvec. EPSS 1.7% chance of exploitation in the next 30 days. Fixed in smallvec 0.6.14, 1.6.1.
An issue was discovered in the smallvec crate before 0.6.14 and 1.x before 1.6.1 for Rust. There is a heap-based buffer overflow in SmallVec::insert_many.
Severity
- EPSS
- 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
- CWE
- CWE-787
- Published
- Modified
- Record from
- the NVD, synced
Affected
- servo:smallvec
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-43w2-9j62-hq99 | crates.io | smallvec | >=0.6.3 <0.6.14 | 0.6.14 |
| GHSA-43w2-9j62-hq99 | crates.io | smallvec | >=1.0.0 <1.6.1 | 1.6.1 |
| RUSTSEC-2021-0003 | crates.io | smallvec | >=0.6.3 <0.6.14 >=1.0.0 <1.6.1 | 0.6.14, 1.6.1 |