CVE-2021-31162

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

In the standard library in Rust before 1.52.0, a double free can occur in the Vec::from_iter function if freeing the element panics.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-415

Affected software

No affected versions have been published.

Timeline

Published
Apr 14, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-311647.5Apache Unomi prior to version 1.5.5 allows CRLF log injection because of the lack of escaping in the log statements.CVE-2021-311657.8Windows Container Manager Service Elevation of Privilege VulnerabilityCVE-2021-311669.8HTTP Protocol Stack Remote Code Execution VulnerabilityCVE-2021-311677.8Windows Container Manager Service Elevation of Privilege VulnerabilityCVE-2021-311687.8Windows Container Manager Service Elevation of Privilege VulnerabilityCVE-2021-311697.8Windows Container Manager Service Elevation of Privilege VulnerabilityCVE-2021-311707.8Windows Graphics Component Elevation of Privilege VulnerabilityCVE-2021-311714.1Microsoft SharePoint Information Disclosure VulnerabilityCVE-2021-311727.1Microsoft SharePoint Server Spoofing VulnerabilityCVE-2021-311735.3Microsoft SharePoint Server Information Disclosure VulnerabilityCVE-2021-311745.5Microsoft Excel Information Disclosure VulnerabilityCVE-2021-311757.8Microsoft Office Remote Code Execution Vulnerability
CVE-2021-31162: Critical severity, CVSS 9.8 | Vulnix