What’s Vulnerable › Vulnerabilities

CVE-2020-36464

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-08-08 · updated 2026-06-17
• Weakness: CWE-416

Description

An issue was discovered in the heapless crate before 0.6.1 for Rust. The IntoIter Clone implementation clones an entire underlying Vec without considering whether it has already been partially consumed.

Affected products

• Heapless Project Heapless: before 0.6.1 — fixed in 0.6.1

How to fix

Upgrade to a fixed version: Heapless Project Heapless 0.6.1. Check the vendor advisory for mitigations.

References

• https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/heapless/RUSTSEC-2020-0145.md
• https://rustsec.org/advisories/RUSTSEC-2020-0145.html
• https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/heapless/RUSTSEC-2020-0145.md
• https://rustsec.org/advisories/RUSTSEC-2020-0145.html

Get alerted when CVE-2020-36464 or the next vulnerability affects your stack