Approved changes feed: RSS · Atom

cpe:2.3:a:servo:smallvec:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorServo (9629cdc6-172a-5f28-b0d0-586ee676af3c)
ProductSmallvec (8a0d7e32-7dee-5e05-8a31-08103d16b0d6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/rust-smallvec purl2cpe 2026-06-01 10:17:54.942586
pkg:deb/ubuntu/rust-smallvec purl2cpe 2026-06-01 10:17:54.942589
pkg:github/servo/rust-smallvec purl2cpe 2026-06-01 10:17:54.942592
pkg:rpm/fedora/rust-smallvec purl2cpe 2026-06-01 10:17:54.942595
pkg:rpm/opensuse/rust-smallvec purl2cpe 2026-06-01 10:17:54.942597

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-15554 vulnerable 2026-06-08 05:12:57.584778 Details available
An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is memory corruption for certain grow attempts with less than the current capacity.
Published: 2019-08-26T14:35:22.000Z
Updated: 2024-08-05T00:49:13.683Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15551 vulnerable 2026-06-08 05:12:57.581492 Details available
An issue was discovered in the smallvec crate before 0.6.10 for Rust. There is a double free for certain grow attempts with the current capacity.
Published: 2019-08-26T14:39:09.000Z
Updated: 2024-08-05T00:49:13.774Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20991 vulnerable 2026-06-08 05:11:28.289002 Details available
An issue was discovered in the smallvec crate before 0.6.3 for Rust. The Iterator implementation mishandles destructors, leading to a double free.
Published: 2019-08-26T14:23:19.000Z
Updated: 2024-08-05T12:19:27.061Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.