CVE-2020-36452

highPriorität · verfolgen · 39EPSS 0.011 · 66. PerzentilEUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

1.12% (66th) EPSS

CVSS 7.5 · high

Is it mine?

4 products

Prüfe deine Angriffsfläche

Who says so?

4 sources

cnnvd · enisa_euvd · osv · nvd

EPSS · bewertet 2026-10-27

An issue was discovered in the array-tools crate before 0.3.2 for Rust. FixedCapacityDequeLike::clone() has a drop of uninitialized memory.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

9.8

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · high–critical · 7.5–9.8

v2.07.5highAV:N/AC:L/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 6.4

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 5.9

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · OSV

v3.19criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-908USprimärCWE-908USCWE-909US

betroffene Produkte (4)

Betroffene Produkte und Versionsbereiche.

n/a n/a≤ n/aenisa_euvdEU
array-tools project array-tools< 0.3.2nvdUScpe:2.3:a:array-tools_project:array-tools:*:*:*:*:*:*:*:*
crates.io array-tools< 0.3.2osvUSpkg:cargo/array-tools
crates.io array-tools0.0.0-0 → 0.3.2osvUSpkg:cargo/array-tools

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

GHSA-6wp2-fw3v-mfmcMemory corruption in array-tools2021-08-25ghsa · osvUS
An issue was discovered in the array-tools crate before 0.3.2 for Rust. Affected versions of this crate don't guard against panics, so that partially uninitialized buffer is dropped when user-provided `T::clone()` panics in `FixedCapacityDequeLike<T, A>::clone()`. This causes memory corruption.
RUSTSEC-2020-0132`FixedCapacityDequeLike::clone()` can cause dropping uninitialized memory2020-12-31vendor · osvUS
Affected versions of this crate don't guard against panics, so that partially uninitialized buffer is dropped when user-provided `T::clone()` panics in `FixedCapacityDequeLike<T, A>::clone()`. This causes memory corruption.

auch bekannt als (5)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd osv nvd NVD CVE.org MITRE

veröffentlicht 2021-08-08geändert 2026-06-17

verwandt (1,064)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2026-85880US	high7.8OT kritisch	0.39% (33rd)	KEV	2026-09-08
Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.
CVE-2025-5777US	high7.5OT kritisch	100.0% (100th)	KEV	2025-06-17
Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
CVE-2024-50302US	medium5.5OT kritisch	0.81% (57th)	KEV	2024-11-19
In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in variou…
CVE-2024-29745US	medium5.5OT kritisch	0.49% (42nd)	KEV	2024-04-05
there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interacti…
CVE-2008-0081US	critical9.8	57.9% (99th)	Exploit	2008-01-16
Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via cra…

+1059 weitere

Referenzen (7)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan