CVE-2019-15551

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is a double free for certain grow attempts with the current capacity.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-415

Affected software

No affected versions have been published.

Timeline

Published
Aug 26, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-155529.8An issue was discovered in the libflate crate before 0.1.25 for Rust. MultiDecoder::read has a use-after-free, leading to arbitrary code exeCVE-2019-155537.5An issue was discovered in the memoffset crate before 0.5.0 for Rust. offset_of and span_of can cause exposure of uninitialized memory.CVE-2019-155549.8An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is memory corruption for certain grow attempts with less than thCVE-2019-155559.8FredReinink Wellness-app before 2019-06-19 allows SQL injection, related to dietTrack.php, exerciseGenerator.php, fitnessTrack.php, and servCVE-2019-155569.8Pvanloon1983 social_network before 2019-07-03 allows SQL injection in includes/form_handlers/register_handler.php.CVE-2019-155579.8XM^online 2 User Account and Authentication server 1.0.0 allows SQL injection via a tenant key.CVE-2019-155589.8XM^online 2 Common Utils and Endpoints 0.2.1 allows SQL injection, related to Constants.java, DropSchemaResolver.java, and SchemaChangeResolCVE-2019-155599.8DianoxDragon Hawn before 2019-07-10 allows SQL injection.CVE-2019-155609.8The Reviews Module before 2019-06-14 for OpenSource Table allows SQL injection in database/index.js.CVE-2019-155619.8FlashLingo before 2019-06-12 allows SQL injection, related to flashlingo.js and db.js.CVE-2019-155629.8GORM before 1.9.10 allows SQL injection via incomplete parentheses. NOTE: Misusing Gorm by passing untrusted user input where Gorm expects tCVE-2019-155639.8Observational Health Data Sciences and Informatics (OHDSI) WebAPI before 2.7.2 allows SQL injection in FeatureExtractionService.java.
CVE-2019-15551: Critical severity, CVSS 9.8 | Vulnix