Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
CVE-2022-36086
September 07, 2022
linked_list_allocator is an allocator usable for no_std systems. Prior to version 0.10.2, the heap initialization methods were missing a minimum size check for the given heap size argument. This could lead to out-of-bound writes when a heap was initialized with a size smaller than "3 * size_of::<usize>" because of metadata write operations. This vulnerability impacts all the initialization functions on the "Heap" and "LockedHeap" types, including "Heap::new", "Heap::init", "Heap::init_from_slice", and "LockedHeap::new". It also affects multiple uses of the "Heap::extend" method. Version 0.10.2 contains a patch for the issue. As a workaround, ensure that the heap is only initialized with a size larger than "3 * size_of::<usize>" and that the "Heap::extend" method is only called with sizes larger than "2 * size_of::<usize>()". Also, ensure that the total heap size is (and stays) a multiple of "2 * size_of::<usize>()".
Do you need more information?
Contact Us
CVSS v4
Base Score:
8.6
Attack Vector
LOCAL
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
NONE
User Interaction
NONE
Vulnerable System Confidentiality
HIGH
Vulnerable System Integrity
HIGH
Vulnerable System Availability
HIGH
Subsequent System Confidentiality
NONE
Subsequent System Integrity
NONE
Subsequent System Availability
NONE
CVSS v3
Base Score:
8.4
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Weakness Type (CWE)
Improper Validation of Specified Quantity in Input
Out-of-bounds Write
Improper Restriction of Operations within the Bounds of a Memory Buffer
EPSS
Base Score:
0.28