Filtered by vendor Servo
Subscriptions
Total
6 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2024-12224 | 1 Servo | 1 Idna | 2025-06-25 | 8.8 High |
Improper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a punycode hostname that one part of a system might treat as distinct while another part of that system would treat as equivalent to another hostname. | ||||
CVE-2021-25900 | 1 Servo | 1 Smallvec | 2024-11-21 | 9.8 Critical |
An issue was discovered in the smallvec crate before 0.6.14 and 1.x before 1.6.1 for Rust. There is a heap-based buffer overflow in SmallVec::insert_many. | ||||
CVE-2019-15554 | 1 Servo | 1 Smallvec | 2024-11-21 | N/A |
An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is memory corruption for certain grow attempts with less than the current capacity. | ||||
CVE-2019-15551 | 1 Servo | 1 Smallvec | 2024-11-21 | N/A |
An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is a double free for certain grow attempts with the current capacity. | ||||
CVE-2018-25023 | 1 Servo | 1 Smallvec | 2024-11-21 | 7.5 High |
An issue was discovered in the smallvec crate before 0.6.13 for Rust. It can create an uninitialized value of any type, including a reference type. | ||||
CVE-2018-20991 | 1 Servo | 1 Smallvec | 2024-11-21 | N/A |
An issue was discovered in the smallvec crate before 0.6.3 for Rust. The Iterator implementation mishandles destructors, leading to a double free. |
Page 1 of 1.