RUSTSEC-2026-0295
Memory corruption bug on `ApplyResult` type
The ApplyResult type contains a raw pointer to a C++ memory object and has a derived Clone implementation which creates a reference to this object without incrementing the associated reference counter.
As a result, if an instance of ApplyResult is duplicated through Clone and both instances are dropped a use-after-free can occur.
What each source reports
OSV No score
Memory corruption bug on `ApplyResult` type
The ApplyResult type contains a raw pointer to a C++ memory object and has a derived Clone implementation which creates a reference to this object without incrementing the associated reference counter.
As a result, if an instance of ApplyResult is duplicated through Clone and both instances are dropped a use-after-free can occur.
- Record
RUSTSEC-2026-0295- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
z3crates.io |
0.0.0-0 up to 0.21.0 | 0.21.0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
RUSTSEC-2026-0295 is a vulnerability with no CVSS score yet in z3, published August 12, 2026. No source lists public exploit code. Fixed in z3 0.21.0.