CVE Intelligence

Mozilla Thin-vec vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Mozilla Thin-vec: 1 record(s), with affected versions and fixes.
cpe:2.3:a:mozilla:thin-vec

CVE-2026-6654 Medium · 5.1 CWE-415 Apr 20, 2026
Use-After-Free and Double-Free in IntoIter::drop when element drop panics
Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVec::clear` functions in the thin_vec crate. A panic in `ptr::drop_in_place` skips setting the length to zero.