Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2026-6654

Use-After-Free and Double-Free in IntoIter::drop when element drop panics

Description

Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVec::clear` functions in the thin_vec crate. A panic in `ptr::drop_in_place` skips setting the length to zero.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mozilla thin-vec

Default version status: unknown

  • 0.2.16 to ≤ *unaffected

References