CVE-2021-31996

HIGH

algorithmica < 2021-03-07 - Use-After-Free in merge_sort::merge()

Title source: llm
STIX 2.1

Description

An issue was discovered in the algorithmica crate through 2021-03-07 for Rust. There is a double free in merge_sort::merge().

References (1)

Core 1
Core References

Scores

CVSS v3 7.5
EPSS 0.0096
EPSS Percentile 56.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-415
Status published
Products (2)
algorithmica_project/algorithmica < 2021-03-07
crates.io/algorithmica 0crates.io
Published May 03, 2021
Tracked Since Feb 18, 2026