CVE-2019-1010299

CVE-2019-1010299

Vendor The Rust Programming Language
Product Standard Library
Weakness CWE-200 · Info exposure
Published July 15, 2019
Last update August 5, 2024

CVSS base score

What the vulnerability does

01Description

The Rust Programming Language Standard Library 1.18.0 and later is affected by: CWE-200: Information Exposure. The impact is: Contents of uninitialized memory could be printed to string or to log file. The component is: Debug trait implementation for std::collections::vec_deque::Iter. The attack vector is: The program needs to invoke debug printing for iterator over an empty VecDeque. The fixed version is: 1.30.0, nightly versions after commit b85e4cc8fadaabd41da5b9645c08c68b8f89908d.

Key dates

02Disclosure timeline

July 15, 2019 CVE published
August 5, 2024 Record updated