CVE-2021-30457: 
Rust vulnerability analysis and mitigation

An issue was discovered in the id-map crate through 2021-02-26 for Rust. A double free vulnerability can occur in remove_set upon a panic in a Drop implementation (RustSec Advisory, NVD).

The vulnerability occurs in the remove_set function when removing a set of elements. The function calls ptr::drop_in_place on each element to be removed. If the Drop implementation of one of these elements panics, then the previously dropped elements can be dropped again, leading to a double free condition. The issue has been assigned a CVSS v3.1 base score of 9.8 CRITICAL with vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (NVD).

A successful exploitation of this vulnerability could lead to memory corruption through double freeing of memory locations. This could potentially result in program crashes, arbitrary code execution, or other undefined behavior when the vulnerable code path is triggered (RustSec Advisory).

The vulnerability can be triggered when using the remove_set function with elements that have a Drop implementation that can panic. No public exploits are known at this time, but the vulnerability is well-documented and could be exploited by crafting specific conditions that cause a panic during the drop operation (RustSec Advisory).

As of the advisory date, there are no patched versions available. Users should avoid using the remove_set function with elements that might panic during their Drop implementation, or ensure proper error handling around these operations (RustSec Advisory).