{"id":"CVE-2018-25023","aliases":["DEBIAN-CVE-2018-25023","EUVD-2022-0458","GHSA-55m5-whcv-c49c","GHSA-66p5-j55p-32r9","RUSTSEC-2018-0018","UBUNTU-CVE-2018-25023","openSUSE-SU-2024:11720-1","openSUSE-SU-2024:11721-1","openSUSE-SU-2024:11729-1"],"status":"published","title":"Use of Uninitialized Resource in smallvec","description":"An issue was discovered in the smallvec crate before 0.6.13 for Rust. It can create an uninitialized value of any type, including a reference type.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01423,"percentile":0.73062,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-457","CWE-908"],"published":"2018-09-25T12:00:00Z","modified":"2026-10-23T18:04:47Z","fixes":[{"ecosystem":"crates.io","package":"smallvec","fixed_in":["0.6.13"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"rust-smallvec","fixed_in":["1.1.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"rust-smallvec","fixed_in":["1.1.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"rust-smallvec","fixed_in":["1.1.0-1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"crates.io","package":"smallvec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.13"}]}]},{"source":"ghsa","ecosystem":"crates.io","package":"smallvec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.13"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"rust-smallvec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"rust-smallvec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"rust-smallvec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-1"}]}]},{"source":"osv","ecosystem":"crates.io","package":"smallvec","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.6.13"}]}]},{"source":"osv","ecosystem":"crates.io","package":"smallvec","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.6.13"}]}]},{"source":"osv","ecosystem":"crates.io","package":"smallvec","ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"0.6.13"}]}]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"rust-smallvec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.6.10-1","1.1.0-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"rust-smallvec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.2-2","1.7.0-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"rust-smallvec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.11.0-1","1.11.2-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"rust-smallvec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.13.2-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"rust-smallvec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.15.1-1","1.15.2-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"rust-smallvec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.13.2-1","1.15.1-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"cargo-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.1~git0.cce1b08-2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"zram-generator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1~git5.8612dbb-1.1"}]}],"bundled":2}],"products":[{"vendor":"servo","product":"smallvec"}],"references":[{"url":"https://rustsec.org/advisories/RUSTSEC-2018-0018.html","tags":["x_transferred","Exploit","Issue Tracking","Third Party Advisory","report","web","advisory"]},{"url":"https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/smallvec/RUSTSEC-2018-0018.md","tags":["x_transferred","Third Party Advisory","advisory","web","report"]},{"url":"https://github.com/servo/rust-smallvec/commit/e64afc8c473d43e375ab42bd33db2d0d4ac4e41b","tags":["x_transferred","fix","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-25023","tags":["advisory"]},{"url":"https://github.com/servo/rust-smallvec/issues/126","tags":["web","report"]},{"url":"https://github.com/servo/rust-smallvec/pull/162","tags":["web"]},{"url":"https://github.com/advisories/GHSA-55m5-whcv-c49c"},{"url":"https://github.com/advisories/GHSA-66p5-j55p-32r9"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-25023","tags":["advisory"]},{"url":"https://github.com/servo/rust-smallvec","tags":["package"]},{"url":"https://crates.io/crates/smallvec","tags":["package"]},{"url":"https://ubuntu.com/security/CVE-2018-25023","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-25023","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-25023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-45710","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-25023","description":"An issue was discovered in the smallvec crate before 0.6.13 for Rust. It can create an uninitialized value of any type, including a reference type.","status":"published","published":"2021-12-26T00:00:00Z","modified":"2024-11-18T19:57:59.18Z","updated_at":"2026-11-02T14:35:01.952568Z"}],"euvd":[{"id":"EUVD-2022-0458","description":"An issue was discovered in the smallvec crate before 0.6.13 for Rust. It can create an uninitialized value of any type, including a reference type.","status":"published","published":"2021-12-26T00:00:00Z","modified":"2024-11-18T19:57:59Z","updated_at":"2026-11-03T00:04:56.531722Z"}],"ghsa":[{"id":"GHSA-55m5-whcv-c49c","title":"Use of Uninitialized Resource in smallvec","description":"Affected versions of this crate called mem::uninitialized() to create values of a user-supplied type T. This is unsound e.g. if T is a reference type (which must be non-null and thus may not remain uninitialized). The flaw was corrected by avoiding the use of mem::uninitialized(), using MaybeUninit instead.","status":"published","published":"2022-01-06T22:20:28Z","modified":"2023-10-02T23:32:50Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-908"],"updated_at":"2026-11-02T14:37:07.641671Z"},{"id":"GHSA-66p5-j55p-32r9","title":"smallvec creates uninitialized value of any type","description":"Affected versions of this crate called `mem::uninitialized()` to create values of a user-supplied type `T`.\nThis is unsound e.g. if `T` is a reference type (which must be non-null and thus may not remain uninitialized).\n \nThe flaw was corrected by avoiding the use of `mem::uninitialized()`, using `MaybeUninit` instead.\n","status":"published","published":"2021-08-25T21:00:25Z","modified":"2023-01-11T05:05:29Z","cwes":["CWE-457"],"updated_at":"2026-11-02T14:36:12.361159Z"}],"nvd":[{"id":"CVE-2018-25023","description":"An issue was discovered in the smallvec crate before 0.6.13 for Rust. It can create an uninitialized value of any type, including a reference type.","status":"published","published":"2021-12-27T00:15:07.95Z","modified":"2026-06-17T01:54:32.587Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-908"],"updated_at":"2026-11-02T14:05:00.565712Z"}],"osv":[{"id":"CVE-2018-25023","description":"An issue was discovered in the smallvec crate before 0.6.13 for Rust. It can create an uninitialized value of any type, including a reference type.","status":"published","published":"2021-12-27T00:15:07.95Z","modified":"2026-11-08T02:45:07.352752959Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-08T02:57:30.447698Z"},{"id":"DEBIAN-CVE-2018-25023","description":"An issue was discovered in the smallvec crate before 0.6.13 for Rust. It can create an uninitialized value of any type, including a reference type.","status":"published","published":"2021-12-27T00:15:07.95Z","modified":"2026-10-23T18:04:47.688811442Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:30.867575Z"},{"id":"GHSA-55m5-whcv-c49c","title":"Use of Uninitialized Resource in smallvec","description":"Affected versions of this crate called mem::uninitialized() to create values of a user-supplied type T. This is unsound e.g. if T is a reference type (which must be non-null and thus may not remain uninitialized). The flaw was corrected by avoiding the use of mem::uninitialized(), using MaybeUninit instead.","status":"published","published":"2022-01-06T22:20:28Z","modified":"2023-11-08T04:00:14.78826Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-908"],"updated_at":"2026-11-02T15:46:37.864461Z"},{"id":"UBUNTU-CVE-2018-25023","description":"An issue was discovered in the smallvec crate before 0.6.13 for Rust. It can create an uninitialized value of any type, including a reference type.","status":"published","published":"2021-12-27T00:15:00Z","modified":"2026-10-17T12:55:26.233635969Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:17.91743Z"},{"id":"GHSA-66p5-j55p-32r9","title":"smallvec creates uninitialized value of any type","description":"Affected versions of this crate called `mem::uninitialized()` to create values of a user-supplied type `T`.\nThis is unsound e.g. if `T` is a reference type (which must be non-null and thus may not remain uninitialized).\n \nThe flaw was corrected by avoiding the use of `mem::uninitialized()`, using `MaybeUninit` instead.\n","status":"published","published":"2021-08-25T21:00:25Z","modified":"2023-11-08T04:00:14.78826Z","cwes":["CWE-457"],"updated_at":"2026-11-02T15:46:39.266402Z"},{"id":"openSUSE-SU-2024:11720-1","title":"cargo-c-0.8.1~git0.cce1b08-2.1 on GA media","description":"These are all security issues fixed in the cargo-c-0.8.1~git0.cce1b08-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:10:16.506118Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11721-1","title":"librav1e0-0.5.1+0-2.1 on GA media","description":"These are all security issues fixed in the librav1e0-0.5.1+0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:09:12.919442Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"openSUSE-SU-2024:11729-1","title":"zram-generator-1.1.1~git5.8612dbb-1.1 on GA media","description":"These are all security issues fixed in the zram-generator-1.1.1~git5.8612dbb-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:22:19.410307Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"RUSTSEC-2018-0018","title":"smallvec creates uninitialized value of any type","description":"Affected versions of this crate called `mem::uninitialized()` to create values of a user-supplied type `T`.\nThis is unsound e.g. if `T` is a reference type (which must be non-null and thus may not remain uninitialized).\n \nThe flaw was corrected by avoiding the use of `mem::uninitialized()`, using `MaybeUninit` instead.","status":"published","published":"2018-09-25T12:00:00Z","modified":"2023-11-08T04:00:14.78826Z","updated_at":"2026-11-02T15:53:39.492624Z"}]}}