Security Advisory

CVE-2026-6654

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-04-20 10:05:52

Last updated 2026-07-15 00:41:16

Assigner mozilla

CVSS score not scored

State PUBLISHED

Description

Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVec::clear` functions in the thin_vec crate. A panic in `ptr::drop_in_place` skips setting the length to zero.

← Browse all CVEs View on cve.org ↗