Vulnerability DatabaseRUSTSEC-2024-0406

RUSTSEC-2024-0406
Rust vulnerability analysis and mitigation

Overview

A memory leak vulnerability was discovered in the BTreeMap implementation of the stable-structures library. When storing unbounded types in a BTreeMap, nodes are represented as linked lists of memory chunks. The issue occurs during node deallocation where only the first memory chunk is deallocated while the remaining chunks stay incorrectly allocated, resulting in a memory leak (GitHub PR).

Technical details

The vulnerability affects the deallocation process of BTreeMap nodes when handling overflow conditions. When a node contains multiple memory chunks in a linked list structure, the deallocation routine fails to properly clean up all chunks beyond the first one, leading to persistent memory allocation of unused chunks (GitHub PR).

Impact

The vulnerability results in memory leaks when deallocating nodes in BTreeMap structures, potentially leading to increased memory usage over time as the leaked memory chunks remain allocated but inaccessible (GitHub PR).

Mitigation and workarounds

The issue has been fixed by modifying the node deallocation logic to ensure all memory chunks associated with a node are properly deallocated. Additional tests have been implemented to prevent similar regressions in the future (GitHub PR).

Additional resources


SourceThis report was generated using AI

Related Rust vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2026-53530HIGH8.7
  • Rust logoRust
  • ratex-parser
NoYesAug 21, 2026
CVE-2026-53531MEDIUM6.9
  • Rust logoRust
  • ratex-parser
NoYesAug 21, 2026
GHSA-mc9m-6fm9-pghcMEDIUM6.9
  • Python logoPython
  • zoo-kcl
NoYesAug 20, 2026
GHSA-jgvr-6x5w-hx5wMEDIUM6.9
  • Python logoPython
  • kcl-lib
NoYesAug 20, 2026
CVE-2026-54136MEDIUM5.1
  • Rust logoRust
  • windmill-api
NoYesAug 20, 2026

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management