All vulnerabilities

Servers and applications

CVE-2015-20001

In the standard library in Rust before 1.2.0, BinaryHeap is not panic-safe. The binary heap is left in an inconsistent state when the comparison of generic elements inside sift_up or sift_down_range panics. This bug leads to a drop of zeroed memory as an arbitrary type, which can result in a memory safety violation.

Severity
High 7.5
Published
11 Apr 2021
Last changed
17 Jun 2026
Added to UpHeron
22 Oct 2026
Fixed in
1.2.0
Sources
NVD

Affected software

SoftwareAffected versions
RustServers and applications · cpe:a:rust-lang:rust
  • Every version before 1.2.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2015-20001
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2015-20001