rustbugs

Source MITRE CVE reports

Project	Src	Link	Culprit	Conseq	Details	Finder	Prop	Unsafe->Safe	BadDrop?
rust-std	CVE-2018-1000810	pull/54399	ARO	OOR	arithmatic overflow (str:repeat)	scottmcm-Rust	No		-
rust-std	CVE-2018-1000657	issues/44800	BOUNDARY	OOR	incorrect boundary check (VecDeque)	jesse99-deps	No		-
rust-std	CVE-2019-12083	issues/60784	TRAITIMPL	OOR	soundness hole impl Error::type_id() + downcasting	seanmonstar-deps	No	-
rust-std	GitHub	issues/17207	FFIUB	UB	args are UB in jemalloc ( Vec::from_elem)	gmorenz	No
rust-std	GitHub	issues/25841	ARO	UAF	arithmatic overflow->shared mut aliases (RefCell)	Veedrac	No
rust-std	GitHub	issues/27970	FFIUB	DR->UAF	setenv is unsafe	bluss-Rust	No
rust-std	GitHub	issues/33770	FFIUB	UAF	glibc recursive lock is UB->shared mut aliases	Amanieu	No
rust-std	GitHub	issues/35836	FFIUB	UAF	recursive RWlock on Windows is UB	retep998-Rust	No
rust-std	GitHub	issues/39465	FNSIG	DP	MUTABILITY:Fn signature issue->shared mut aliases	christophebiocca	No
rust-std	GitHub	issues/39575	FNSIG+FFIUB	DR->UB	SAFETY:should be unsafe, UB according to POSIX (CommandExt::before_exec)	fweimer	No
rust-std	GitHub	issues/42135	CASE+GENERIC	UB	miss handling cases (degenerate inclusive ranges)->incorrect result (TrustedLen)	scottmcm-Rust	No
rust-std	GitHub	issues/42789	GENERIC	OOR	SliceIndex is unsound for ZST, interation->random addr	RalfJung-Rust	No
rust-std	GitHub	issues/43733	LOE	UAF	access static value without unsafe marker->CC(thread::local)	eddyb-Rust	No
rust-std	GitHub	issues/44637	CASE	OOR	does not handle -1 properly (Placer)	andy-hanson	No
rust-std	GitHub	issues/45197	LOE+TRAITIMPL	DR->UAF	TRAIT: autotrait enables bypassing sync/send check（fmt::Arguments）+ PhantomData	cuviper-Rust	No
rust-std	GitHub	issues/46775	FFIUB	DR->UAF	multi-thread unsafe (unix::process::CommandExt::exec)	Diggsey	No
rust-std	GitHub	issues/48006	ARO	OOR	arithmatic overflow on 16-bit platforms	oberien	No
rust-std	GitHub	issues/48493	GENERIC+RAII	UNINIT	Weak not support Void, frees uninitialized mem	jleedev	No
rust-std	GitHub	issues/51780	EAPI	DR->UAF	MEMORY:insufficient synchronization (Arc::is_unique) Relaxed->Acquire	jhjourdan	No
rust-std	GitHub	issues/54857	GENERIC	OOR	slice of Vec not support ZST or 0-len Vec	jturner314	No
rust-std	GitHub	issues/54908	GENERIC	UB	Rc/Arc not support T with alignment < 8	RalfJung	No
rust-std	GitHub	issues/54957	CASE	OOR	inconsistent type of Root node (BTreeSet)	RalfJung-Rust	No
rust-std	GitHub	issues/57534	FFIUB	DR->UAF	TLS:_tlv_atexit during tlv_finalize is UB (thread_local)	mtak-	May
rust-std	GitHub	issues/60977	UNWIND+RAII	DF	double free while panic (Vec::drain_filter)	rustonaut	No		May
rust-std	GitHub	issues/66544	GENERIC	UAF	Pin<T:DerefMut> for <&`a Foo> /Clone	comex
rust-std	GitHub	issues/67194	GENERIC	OOR	RangeInclusiveIdx:PartialEq not support customized struct	comex	No
rust-std	GitHub	issues/72624	ARO	OOR	possible arithmatic overflow (DroplessArena::alloc_raw)	bluss-Rust	No
rust-std	GitHub	issues/72760	CASE	UB	push "0xD800" generates invalid UTF-8	RalfJung-Rust	No
rust-std	GitHub	issues/76367	RAII	UAF	logical error (SyncOnceCell/dropck)+PhantomData	m-ou-se-Rust
rust-std	GitHub	issues/78477	LOE	UNKNOWN	violate pointer provenance rules	RalfJung-Rust	No
rust-std	GitHub	issues/78498	EXCEP	UB	invalid UTF-8 while catch_unwind (String)	SkiFire13	No
rust-std	Advisory-DB	issues/79808	BOUNDARY	UAF	incorrect boundary check (VecDeque)	ayourtch	No
rust-std	GitHub	issues/80338	BOUNDARY	UB	incorrect boundary check (VecDeque)-79808	Aratz	No		-
rustc (fake-static)	Advisory-DB	issues/25860	COMPILER	UB->UAF	type system issue->lifetime inconsistency	aturon-Rust	No	-	-
rust-base64	CVE-2017-1000430	issues/28	ARO	OOR	arithmatic overflow + unsafe write	alicemaz	No
rust-smallvec	CVE-2018-20991	issues/96	UNWIND+RAII	DF	buffer shrinking too late	Vurich	No		Hard
claxon	CVE-2018-20992/T	issues/10	LOE	UNINIT->DL	Vec::set_len()->read unit mem	Shnatsel-sec	No	No
slice-deque	CVE-2018-20995	issues/57	BOUNDARY	OOR	error in boundary check + unsafe write	aldanor-deps	No
crossbeam-epoch	CVE-2018-20996	issues/82	RAII	DF	shared mut aliases+auto drop/+ManuallyDrop	c0gent	No		Yes
rust-openssl	CVE-2018-20997	issues/941	RAII	UAF	pointer obj lifetime inconsistency/as_ptr()	No (fred-gremlin)	No	Yes
arrayfire-rust	CVE-2018-20998	issues/176	FFIUB	OOR	FFI-compatability/repr()	Aidan24	No
safe-transmute	CVE-2018-21000	pull/36	EAPI	OOR	wrong param order of from_raw_parts()	Enet4-deps	No	No	-
slice-deque	CVE-2019-15543	pull/66	CASE	OOR	lack special case handling ->memory misalignment	zimond	No	No	-
ncurses	CVE-2019-15547	issues/172	FNSIG+FFIUB	OOR	SAFETY:FFI-unchecked argument/printw()	thomcc	No
ncurses	CVE-2019-15548	issues/186	FNSIG+FFIUB	OOR	SAFETY:FFI-unchecked argument/instr(), mvwinstr()	thomcc
simd-json	CVE-2019-15550	pull/27	CASE	OOR	lack special case handling->mem misalign/get_unchecked()	Licenser-deps	No	No	-
rust-smallvec	CVE-2019-15551	issues/148	LOE	UAF	miss an else branch->manuall deallocation	ehuss	No	No	May
libflate	CVE-2019-15552	issues/35	UNWIND+RAII	UNINIT	enf. ManuallyDrop late->drop uninit	Shnatsel-sec	No		Yes
memoffset	CVE-2019-15553	issues/9	UNWIND+RAII	UNINIT	enf. ManuallyDrop late->drop uninit mem	Centril	No		Yes
rust-smallvec	CVE-2019-15554	issues/149	LOE	OOR	logical error + unsafe write	ehuss	No
spin-rs	CVE-2019-16137	issues/65	EAPI	DR->UAF	impl error: Ordering::Relaxed->Release	64	No	No	No
image	CVE-2019-16138	issues/980	UNWIND+RAII	UNINIT	unsafe allocation->drop uninit mem/set_len()	64	No		Hard
compact_arena	CVE-2019-16139	issues/22	LOE	OOR	NLL issue->Index trait/get_unchecked()	CAD97	No
isahc	CVE-2019-16140	issues/2	RAII	UAF	unsafe constructor+no ManuallyDrop	nox	No		Yes
once_cell	CVE-2019-16141	issues/46	EAPI	UB	unreachable_unchecked()->panic!()	xfix-deps	No	No	-
renderdoc-rs	CVE-2019-16142	issues/27	FNSIG	UB	MUTABILITY:mutable (internal mutation)	ebkalderon-owner	No	No	-
generator-rs	CVE-2019-16144	issues/11	RAII	DF	shared mut aliases+auto drop	vOROn200	No		Yes
linea.rs	CVE-2019-16880	issues/1	UNWIND+RAII	DF	enf. ManuallyDrop late	Phosphorus15	No		Yes
portaudio-rs	CVE-2019-16881	issues/20	UNWIND+RAII	DF	enf. ManuallyDrop late	Phosphorus15	No		Yes
string-interner	CVE-2019-16882	issues/9	RAII+TRAITIMPL	UAF	bad derived clone ->shared mut aliases	lo48576-deps	No		No
teaclave-sgx-sdk	CVE-2020-5499	www.mitre.org	LOE	DR->UB	may init twice by another thread/+Once::new()	Chen-sec	No	No	-
vm-memory	CVE-2020-13759	issues/93	EAPI	DR->UB	volatile mem acc/ptr::write()$\to$write_volatile()	andreeaflorescu-deps	No
rust-rgb	CVE-2020-25016	issues/35	TRAIT	UB	using unsafe trait Plain to takeover unsoundness	HeroicKatora	No	No	-
linked-hash-map	CVE-2020-25573	pull/100	EAPI+RAII	UNINIT	object with uninit mem of type T (HashMap)	SpaceManiac-deps	No		May
http	CVE-2020-25574	issues/354	UNWIND+RAII	DF	buf. shrinking too late (rely on drop)	Qwaz-sec	No		May
failure	CVE-2020-25575	issues/336	TRAITIMPL	OOR	soundness hole same as CVE-2019-12083	Qwaz-sec	No
rand	CVE-2020-25576	issues/779	EAPI	UB	reading unaligned mem/ptr::read_unaligned()	RalfJung-sec	No	No	-
time	CVE-2020-26235	issues/293	FFIUB	DR->UAF	call non-atomic libc functions (setenv)	quininer	<->		No
sized-chunks	CVE-2020-25791	issues/11:unit	BOUDARY	OOR	Lack input capacity check	Qwaz-sec	No
sized-chunks	CVE-2020-25792	pair	BOUDARY	OOR	Lack input capacity check	Qwaz-sec	No
sized-chunks	CVE-2020-25793	From	BOUDARY	OOR	Lack input capacity check	Qwaz-sec	No
sized-chunks	CVE-2020-25794	clone	UNWIND+RAII	UNINIT	panic->drop uninitialized memory	Qwaz-sec	No		Yes
sized-chunks	CVE-2020-25795	insert_from	UNWIND+RAII	DF	panic->double drop	Qwaz-sec	No		Hard
sized-chunks	CVE-2020-25796	InlineArray	GENERIC	UB	LargeAlign:	Qwaz-sec	No
arc-swap	CVE-2020-35711	issues/45	RAII	UAF	+PhantomData	Qwaz-Sec	No		MAY
lucet	CVE-2020-35859	pull/401	LOE	UB	logical error->memory man. issue	acfoltzer-deps	No
cbox-rs	CVE-2020-35860	issues/2	FNSIG	UAF	SAFETY:declare unsafe API as safe	eduardosm	No		No
bumpalo	CVE-2020-35861	issues/69	LOE	OOR	READ:copy wrong size	Riey-deps	No
bitvec	CVE-2020-35862	issues/55	LOE	UAF	SYSTEM:MacOS reallocate the address after shrinking; Should use the new addr.	kulp-sec	No	No
flatbuffers	CVE-2020-35864	issues/5825	FNSIG	UB	SAFETY:func. sign.: safety declaration	eduardosm	No	No	-
os_str_bytes	CVE-2020-35865	pull/1	EAPI	UB	unsafe use of char::from_u32_unchecked()	eduardosm	No	MAY	-
rusqlite	CVE-2020-35866	VTab	TRAIT	UB	SAFETY:should declare trait as unsafe	gwenn-deps	No
rusqlite	CVE-2020-35867	create_module	FNSIG	UAF	LIFETIME:static ref should point to static ret value	thomcc-deps	No
rusqlite	CVE-2020-35868	UnlockNotif	RAII	DR->UB	NLL:mutex lock is released before send condvar	gwenn-deps	No
rusqlite	CVE-2020-35869	log	EAPI+FFIUB	OOR	wrong parameters in api call	thomcc-deps	No
rusqlite	CVE-2020-35870	Auxdata API	TBOUND	DR->UAF	lack sync/send bound	thomcc-deps	No
rusqlite	CVE-2020-35871	Auxdata API	TBOUND	DR->UAF	lack sync/send bound	thomcc-deps	No
rusqlite	CVE-2020-35872	Auxdata API	FFIUB	UB->OOR	+ repr(C)	gwenn-deps	No
rusqlite	CVE-2020-35873	sessions.rs	RAII	UAF	similar to CVE-2018-20997 as_ptr()	thomcc-deps	No
internment	CVE-2020-35874	issues/11	LOE+CC	UB	TOCTOU:impl error: Ordering, atomic::fence()	ryzhyk-deps	No	No	-
rio	CVE-2020-35876	issues/11	FNSIG	UAF	SAFETY:	dtolnay-Rust	No		No
ozone	CVE-2020-35877	index	BOUNDARY	OOR(Read)	lack boundary check	n.a.	No
ozone	CVE-2020-35878	remove_entry	RAII	UNINIT	implement drop with uninit mem	N.A.	No		Yes
rulinalg	CVE-2020-35879	issues/201	FNSIG	UB->UAF	LIFETIME:func. sign.:lifetime	Qwaz-sec	No		No
traitobject	CVE-2020-35881	issues/7	EAPI	UB->OOR	assumes that the first element is a fat pointer is the data pointer	eduardosm	No	Yes	No
Rocket	CVE-2020-35882	issues/1312	RAII+TRAITIMPL	UAF	Clone may incur mutable aliases	Qwaz	No
rust-arch	CVE-2020-35885	issues/2	RAII	UAF	direct construction->drop memory not owned	Qwaz-Sec	No	No	No
array	CVE-2020-35886	issues/1:Array	TBOUND	DR->UAF	lack sync/send bound	Qwaz-Sec	No		No
array	CVE-2020-35887	issues/1:Index	BOUNDRY	OOR	Index and IndexMut lack bound check	Qwaz-Sec	No	Yes	-
array	CVE-2020-35888	new_from	RAII	UNINIT	alloc:alloc(), then *ptr = value	Qwaz-Sec	No		No
crayon	CVE-2020-35889	issues/87	TRAITIMPL	OOR	TRAIT: time-of-check to time-of-use (TOCTOU) bug	Qwaz	No		No
ordnung	CVE-2020-35890	issues/8	LOE	OOR		Qwaz	No		No
ordnung	CVE-2020-35891	issues/8	UNWIND+RAII	DF	panic->double free	Qwaz	No		May
simple-slab	CVE-2020-35892	issues/2	BOUNDARY	OOR	Slab::index() does not perform the boundary checking	Qwaz	No
simple-slab	CVE-2020-35893	issues/2	BOUNDARY	OOR	copies an element from an invalid address due to off-by-one error	Qwaz	No
obstack	CVE-2020-35894	issues/4	LOE	UB	SIMPLE: wrong padding calculation	Qwaz	No	No	-
stack-rs	CVE-2020-35895	issues/4	BOUNDARY	OOR	lack boundary check	ammaraskar	No	No
atom	CVE-2020-35897	issues/13	TBOUND	DR->UAF	lack send/sync bound	ammaraskar-Sec	No		No
actix-net	CVE-2020-35898	issues/160	EAPI	DR->UAF	replace Cell with Rc<RefCell>	Shnatsel	No		No
actix-net	CVE-2020-35899	pull/158	EAPI	DR->UAF	replace Cell with Rc<RefCell>	Shnatsel	No		No
actix-web	CVE-2020-35901	issues/1321	TBOUND	DR->UAF	BodyStream should be pined	sebzim4500	No		No
actix-net	CVE-2020-35902	issues/91	TBOUND	DR->UAF	frame should be pined	sebzim4500	No	No	No
dync	CVE-2020-35903	issues/4	GENERIC	UB	LargeAlign: as_ptr->.ptr	ammaraskar-Sec	No
crossbeam	CVE-2020-35904	pull/533	EAPI	UAF	drop memory not owned Vec->Box	caelunshun	No
futures-rs	CVE-2020-35905	issues/2239	TBOUND	DR->UAF	lack send/sync bound	Qwaz-Sec	No	No	No
futures-rs	CVE-2020-35906	pull/2206	TBOUND	UAF	LIFETIME:lack lifetime bound	Darksonn	No		No
futures-rs	CVE-2020-35907	issues/2091	LOE	UAF	TLS:ref lives longer than thread (UnsafeCell->Lazy)	goffrie	No		No
futures-rs	CVE-2020-35908	issues/2050	FNSIG	UAF	BAD:deprecated sync impl for a structure with Cell	okready	No	-	No
parking_lot	CVE-2020-35910	MappedMutex	TBOUND	DR->UAF	lack send bound	ammaraskar-Sec	No	No	No
parking_lot	CVE-2020-35911	RwLockRead	TBOUND	DR->UAF	lack sync bound	ammaraskar-Sec	No	No	No
parking_lot	CVE-2020-35912	RwLockWrite	TBOUND	DR->UAF	lack send bound	ammaraskar-Sec	No	No	No
parking_lot	CVE-2020-35913	RwLockRead	TBOUND	DR->UAF	lack sync bound	ammaraskar-Sec	No	No	No
parking_lot	CVE-2020-35914	RwLockWrite	TBOUND	DR->UAF	lack sync bound	ammaraskar-Sec	No	No	No
futures-intrusive	CVE-2020-35915	issues/53	TBOUND	DR->UAF	lack send/sync bound	ammaraskar-Sec	No	No	No
image	CVE-2020-35916	issues/1357	EAPI	UB	MUT:convert mutable ptr from const ptr	dodomorandi	No
pyo3	CVE-2020-35917	pull/1297	RAII	UAF	unthought of dropping: Py(ptr, _) = other	davidhewitt	No		Hard
net2-rs	CVE-2020-35920	issues/105	FFIUB	UB	assumes the same layout of FFI	Thomasdezeeuw	No	No	No
miow	CVE-2020-35921	issues/38	FFIUB	UB	assumes the same layout of FFI	faern	No	No	No
rust-ordered-float	CVE-2020-35923	pull/71	EXCEP	UB	panic may cause UB	branpk	No	No	No
try-mutex	CVE-2020-35924	issues/2	TBOUND	DR->UAF	lack send/sync bound	ammaraskar-Sec	No		No
magnetic	CVE-2020-35925	issues/9	TBOUND	DR->UAF	lack send/sync bound	JOE1994-Sec	No	No	No
thex	CVE-2020-35927	-	TBOUND	DR->UAF	lack send/sync bound	Qwaz-Sec	No		No
concread	CVE-2020-35928	issues/48	TBOUND+CC	DR->UAF	lack send/sync bound	JOE1994-Sec	No		No
concread	CVE-2020-35928	issues/48	TBOUND	DR->UAF	lack sync/send bound	JOE1994	No	-	No
reffers-rs	CVE-2020-36203	issues/7	TBOUND	DR->UAF	lack sync/send bound	JOE1994	No	-	No
im-rs	CVE-2020-36204	issues/157	TBOUND	DR->UAF	lack sync/send bound	ammaraskar	No	-	No
rust-xcb	CVE-2020-36205	issues/93	RAII	UAF	CONSTRUCTOR:struct can be init with any ptr	ammaraskar	No	-	?
rusb	CVE-2020-36206	issues/44	TBOUND	DR->UAF	lack sync/send bound	Qwaz	No	-	No
aovec	CVE-2020-36207	RustSec	TBOUND	DR->UAF	lack sync/send bound		No	-	No
conquer-once	CVE-2020-36208	issues/3	TBOUND	DR->UAF	lack sync/send bound	JOE1994	No	-	No
late-static	CVE-2020-36209	issues/1	TBOUND	DR->UAF	lack sync/send bound	ammaraskar	No	-	No
autorand-rs	CVE-2020-36210	issues/5	UNWIND+RAII	UNINIT	panic->drop uninit memory	JOE1994	No	-	No
gfwx-rs	CVE-2020-36211	issues/7	TBOUND	DR->UAF	lack sync/send bound	ammaraskar	No	-	No
abi_stable_crates	CVE-2020-36212	issues/44	UNWIND+RAII	DF	bug copied from Rust std-lib (60977)	Qwaz	No	-	No
abi_stable_crates	CVE-2020-36213	issues/44	EXCEP	UB	bug copied from Rust std-lib (78498)	Qwaz	No	-	No
multiqueue2	CVE-2020-36214	issues/10	TBOUND	DR->UAF	lack sync/send bound	JOE1994	No	-	No
hashconsing	CVE-2020-36215	issues/1	TBOUND	DR->UAF	lack sync/send bound	ammaraskar	No	-	No
eventio	CVE-2020-36216	issues/33	TBOUND	DR->UAF	lack sync/send bound	JOE1994	No	-	No
may	CVE-2020-36217	issues/88	TBOUND	DR->UAF	lack sync/send bound	ammaraskar	No	-	No
buttplug-rs	CVE-2020-36218	issues/225	TBOUND	DR->UAF	lack sync/send bound	JOE1994	No	-	No
rust-atomic-option	CVE-2020-36219	issues/4	TBOUND	DR->UAF	lack sync/send bound	ammaraskar	No	-	No
va-ts	CVE-2020-36220	issues/4	TBOUND	DR->UAF	lack sync/send bound	JOE1994	No	-	No
rust-smallvec	CVE-2021-25900	issues/252	LOE	OOR	error in using self.reserve()	Qwaz		-	-
lazy-init	CVE-2021-25901	issues/9	TBOUND	DR	lack sync/send bound	niklasf		-	-
glsl-layout	CVE-2021-25902	pull/10	UNWIND+RAII	DF	ptr::read() can be dropped twice	JOE1994		-	-
generator-rs	Advisory-DB	issues/9	FNSIG	UB	SAFETY:func. sign.->deref invalid/null pointer	jonas-schievink	No	No	-
generator-rs	Advisory-DB	issues/13	FNSIG	UB	BAD:bad func. exposure	jonas-schievink	No
generator-rs	Advisory-DB	issues/14	FNSIG	UB	BAD:bad func. exposure	jonas-schievink	No
flatbuffers	Advisory-DB	issues/5530	CASE	UB	CONSTRUCTOR:invalid bit pattern for bool	nagisa	No	No	-
chunky	Advisory-DB	issues/2	GENERIC	OOR	LargeAlign:as_ptr->.ptr	Qwaz-Sec	No	No	-
pulse-binding-rust	Advisory-DB	Iterator	RAII	UAF	lack lifetime bound: +PhantomData	jnqnfe	No		May
pulse-binding-rust	Advisory-DB	catch_unwind	EXCEP+FFIUB	UB	handle FFI caused UB with catch_unwind()	okready	No	No	-
actix-web	Advisory-DB	issues/289	LOE	UAF	multiple issues	seanmonstar	No	No	-
actix-web	Advisory-DB	issues/301	TBOUND	UAF	InternalError with generics is unsound for Rc	seanmonstar-Mozilla	No
alg_ds	Advisory-DB	issues/1	GENERIC	UNINIT	Matrix:alloc:alloc(), then *ptr = value	Qwaz-Sec	No		No
http	Advisory-DB	issues/355	TBOUND	DR->UAF	LIFETIME:lack lifetime bound->multile mut refs	Qwaz-sec	No
rust-smallvec	Advisory-DB	issues/126	EAPI	UNINIT	init vector with mem:uninitialized()	mbrubeck	No	Yes
v_espace	Trophy Case	issues/47	CASE+FFIUB	OOR	logical error->mem misalign	_mm_load_si128()	tmiasko	No	No
capnproto-rust	Trophy Case	issues/40	LOE	UB	error parameters of set_far()	dwrensha-sec	No	No	-
sxd-document	Trophy Case	issues/47	RAII	UAF	unsafe constructor+no ManuallyDrop	CryZe-sec	No		Yes
lz4_flex	Trophy	commit	LOE	OOR	logical error in space allocation	Pascal Seitz-sec	No
alacritty (exe)	GitHub	pull/4397	RAII	UAF	shared mut aliases (ptr::copy->clone)	kchibisov-dev	No	Yes	No
alacritty (exe)	GitHub	pull/2176	RAII	UAF	value of as_ptr() is dropped after map_or_else() (+as_ref()), Similar to CVE-2018-20997?	aspurdy	No	No	May
curl-rust	GitHub	pull/2	RAII	UAF	**using mem::transmute()	No(alexcrichton-rust)	No	Yes	May
curl-rust	GitHub	issues/333	FFIUB	DR->UB	does not enforce FFI restrictions	DemiMarie/sagebind-deps	Yes	No	-
curl-rust	GitHub	issues/340	FNSIG	UAF	SAFETY:exposing unsafe cleanup APIs as safe	sagebind-deps	No
diem-libra (exe)	GitHub	pull/1949	FNSIG	UAF	LIFETIME:ineffective lifetime restriction (too_owned())	dtolnay-Rust	No	No	May
servo (exe)	GitHub	issues/1186	RAII+FFIUB	DF	impl Drop with unsafe	kmcallister	No	Yes	-
servo (exe)	GitHub	issues/2412	LOE	DF	unsafe cast: *()=>Vec<>	glennw	No	Yes	No
servo (exe)	GitHub	issues/14014	LOE	DR->UAF	clone FlowRef lead to share aliases => Arc	pcwalton-deps	No
servo (exe)	GitHub	issues/14416	LOE	UAF	FnBox<()>	pcwalton-deps	No	No	No
servo (exe)	GitHub	issues/20158	FNSIG	UB	SAFETY:declare unsafe constructor as safe	nox-org	No
servo (exe)	GitHub	issues/21186	EAPI	DR->UB	Relaxed->Acquire, same as rust-std-51780	RalfJung	No	No	No
servo (exe)	GitHub	pull/26641	EAPI	UB	mem::transmute->Box::into_raw(), unsafe should be removed?	dylni	No	May	-
Tokio	CVE-2020-35922	issues/1386	FFIUB	UB	assumes the same layout of FFI	Nemo157-Rust	No	No	No
Tokio	GitHub	*pull/254	RAII	UAF	drop	seanmonstar-dev	No	No	Hard
Tokio	GitHub	pull/2030	TRAITIMPL	OOR	similar to CVE-2019-12083, vulnerable to false trait impl	Marwes	No	No	-
Tokio	GitHub	pull/2612	TBOUND	OOR	lack trait bound: +unpin	taiki-e-dev	No	No	-
Tokio	GitHub	issues/3014	LOE	UAF	off-by-one logical error	NikosEfthias	No	No	No
array-queue	CVE-2020-35900	issues/2	NO	-	FALSE CVEs?	ammaraskar-Sec	-	-	-
bigint	CVE-2020-35880	deprecated	UNMAINTAIN	UB	library unmaintained/deprecated		No

Curlprits:

• EAPI: error in API usage.
• RAII: resource acquisition is initialization.
• UNWIND: error occurs in stack unwinding or exception handling.
• TYPE: type-safety issue.
• TYPECONV:type conversion issue.
• TBOUND: insufficient bound.
• GENERIC: soundness hole for accpting some types as the generic.
• ARO: arithmatic overflow.
• BOUNDARY: boundary check issue or lack boundary check.
• CASE: lack special case handling.
• LOE: other logical errors.
• FFIUB: undefined behavior due to FFI.
• FNSIG: function signature issue.

Memory-Safety Consequences:

• OOR:out-of-range access; BO: buffer overflow; BOR: buffer over-read;
• UAF: use-after-free. DP: dangling pointer;
• DF: double free.
• UNINIT: access/free uninitialized memory. DL: data leakage.
• UB: undefined behaviors.

Other abbreviations:

• RC: race condition
• DR: data race.
• CC: concurrency issue.

Other CVEs (Non-Memory-Safety Issue):

• Crypto/Functionality Issue: CVE-2016-10932, CVE-2017-18587, CVE-2018-20999, CVE-2019-15545, CVE-2019-16760, CVE-2017-1000168, CVE-2020-15093, CVE-2020-26281, CVE-2020-35926, CVE-2020-35883, CVE-2020-36202, CVE-2021-21269, CVE-2021-21299, CVE-2021-20332, CVE-2021-24117, CVE-2021-24147;

• MITM/Code Injection: CVE-2016-10931, CVE-2016-10933, CVE-2020-26222, CVE-2020-26297, CVE-2020-28247, CVE-2020-35863, CVE-2020-35884;

• StackOverflow/Crash: CVE-2017-18589, CVE-2018-20989, CVE-2018-20993, CVE-2018-20994, CVE-2019-15542, CVE-2019-15544, CVE-2019-15549, CVE-2020-35857, CVE-2020-35858, CVE-2020-35875, CVE-2020-35896, CVE-2020-35909, CVE-2021-21235.

• Cargo/Rustdoc: CVE-2018-1000622, CVE-2019-16760