CVE catalog

CVE-2018-25023

rust-smallvec: CVE-2018-25023

[CVE catalog]

Severity
Low · CVSS 2.5CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Published
Source
[NVD] · [CVE record]
EPSS
1.42% · Oct 22, 2026

An issue was discovered in the smallvec crate before 0.6.13 for Rust. It can create an uninitialized value of any type, including a reference type.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianrust-smallvecsid1.16.2-1fixed
Debianrust-smallvecforky1.15.2-1fixed
Debianrust-smallvectrixie1.13.2-1fixed
Debianrust-smallvecbookworm1.9.0-1fixed
Opensusezram-generatortumbleweed1.1.1~git5.8612dbb-1.1fixed
Opensusecargo-ctumbleweed0.8.1~git0.cce1b08-2.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianrust-smallvecsourcesid1.1.0-1not yet assignedNot reportedNot reported
Debianrust-smallvecsourceforky1.1.0-1not yet assignedNot reportedNot reported
Debianrust-smallvecsourcetrixie1.1.0-1not yet assignedNot reportedNot reported
Debianrust-smallvecsourcebookworm1.1.0-1not yet assignedNot reportedNot reported
Opensusezram-generatorrpmtumbleweed1.1.1~git5.8612dbb-1.1Not reportedOPENSUSE-SU-2024:11729-1Not reported
Opensusecargo-crpmtumbleweed0.8.1~git0.cce1b08-2.1Not reportedOPENSUSE-SU-2024:11720-1Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [librust-smallvec-dev]Fixed

    Source package: [rust-smallvec]

    Details (2)

    • 1.9.0-1 · amd64 · bookworm

      Fixed · Fixed: 1.1.0-1

      dsa · rust-smallvec · debian · bookworm; dsa · rust-smallvec · debian · 12

    • 1.9.0-1 · arm64 · bookworm

      Fixed · Fixed: 1.1.0-1

      dsa · rust-smallvec · debian · bookworm; dsa · rust-smallvec · debian · 12

[Debian 13 (Trixie)]

  • [librust-smallvec-dev]Fixed

    Source package: [rust-smallvec]

    Details (2)

    • 1.13.2-1 · amd64 · trixie

      Fixed · Fixed: 1.1.0-1

      dsa · rust-smallvec · debian · 13

    • 1.13.2-1 · arm64 · trixie

      Fixed · Fixed: 1.1.0-1

      dsa · rust-smallvec · debian · 13

[openSUSE Tumbleweed]

  • [cargo-c]Fixed

    Source package: [cargo-c]

    Details (1)

    • 0.10.23-2.1 · x86_64 · tumbleweed

      Fixed · Fixed: 0.8.1~git0.cce1b08-2.1

      dsa · cargo-c · opensuse · tumbleweed

  • [zram-generator]Fixed

    Source package: [zram-generator]

    Details (1)

    • 1.2.1-1.7 · x86_64 · tumbleweed

      Fixed · Fixed: 1.1.1~git5.8612dbb-1.1

      dsa · zram-generator · opensuse · tumbleweed

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]