CVE-2019-15554

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is memory corruption for certain grow attempts with less than the current capacity.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Aug 26, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-155559.8FredReinink Wellness-app before 2019-06-19 allows SQL injection, related to dietTrack.php, exerciseGenerator.php, fitnessTrack.php, and servCVE-2019-155569.8Pvanloon1983 social_network before 2019-07-03 allows SQL injection in includes/form_handlers/register_handler.php.CVE-2019-155579.8XM^online 2 User Account and Authentication server 1.0.0 allows SQL injection via a tenant key.CVE-2019-155589.8XM^online 2 Common Utils and Endpoints 0.2.1 allows SQL injection, related to Constants.java, DropSchemaResolver.java, and SchemaChangeResolCVE-2019-155599.8DianoxDragon Hawn before 2019-07-10 allows SQL injection.CVE-2019-155609.8The Reviews Module before 2019-06-14 for OpenSource Table allows SQL injection in database/index.js.CVE-2019-155619.8FlashLingo before 2019-06-12 allows SQL injection, related to flashlingo.js and db.js.CVE-2019-155629.8GORM before 1.9.10 allows SQL injection via incomplete parentheses. NOTE: Misusing Gorm by passing untrusted user input where Gorm expects tCVE-2019-155639.8Observational Health Data Sciences and Informatics (OHDSI) WebAPI before 2.7.2 allows SQL injection in FeatureExtractionService.java.CVE-2019-155649.8The Compassion Switzerland addons 10.01.4 for Odoo allow SQL injection in models/partner_compassion.py.CVE-2019-155659.8The ICOMMKT connector before 1.0.7 for PrestaShop allows SQL injection in icommktconnector.php.CVE-2019-155669.8The Alfresco application before 1.8.7 for Android allows SQL injection in HistorySearchProvider.java.
CVE-2019-15554: Critical severity, CVSS 9.8 | Vulnix