Related Vulnerabilities: CVE-2020-36323  

In the standard library in Rust before 1.50.3, there is an optimization for joining strings that can cause uninitialized bytes to be exposed (or the program to crash) if the borrowed string changes after its length is checked.

Severity Medium

Remote Yes

Type Information disclosure

Description

In the standard library in Rust before 1.50.3, there is an optimization for joining strings that can cause uninitialized bytes to be exposed (or the program to crash) if the borrowed string changes after its length is checked.

AVG-1801 rust 1:1.51.0-1 Medium Vulnerable

https://github.com/rust-lang/rust/issues/80335
https://github.com/rust-lang/rust/pull/81728
https://github.com/rust-lang/rust/commit/5208f63ba8ec70a2a7a074d7ecd59a94693286fc