Executive brief
Slice Ring Buffer and Slice Deque contains four unique double-free vulnerabilities triggered through safe APIs
Affected products
- crates.io slice-ring-buffer
- crates.io slice-deque
Junglewise Threat Intelligence
Slice Ring Buffer and Slice Deque contains four unique double-free vulnerabilities triggered through safe APIs
Severity: medium · CVSS 4 · Published 2025-07-16
Technologies: slice-deque (crates.io). Vendors: crates.io.
Related threats
- RUSTSEC-2025-0044 - Four unique double-free vulnerabilities triggered via safe APIs
- RUSTSEC-2021-0047 - SliceDeque::drain_filter can double drop an element if the predicate panics
- RUSTSEC-2020-0158 - slice-deque is unmaintained
- RUSTSEC-2019-0002 - Bug in SliceDeque::move_head_unchecked corrupts its memory
- RUSTSEC-2018-0008 - Bug in SliceDeque::move_head_unchecked allows read of corrupted memory