CVE-2021-28032
Critical
Description
An issue was discovered in the nano_arena crate before 0.5.2 for Rust. There is an aliasing violation in split_at because two mutable references can exist for the same element, if Borrow<Idx> behaves in certain ways. This can have a resultant out-of-bounds write or use-after-free.
SeverityCritical
CVSS9.8
Exploit probability—
ProductNano Arena
PublishedMar 5, 2021
First seenMar 5, 2021
How to fix
Update
- nano_arena_project nano_arena0.5.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nano_arena_project nano_arena | v < 0.5.2 | 0.5.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.