
Cloud Vulnerability DB
A community-led vulnerabilities database
A memory leak vulnerability was discovered in the BTreeMap implementation of the stable-structures library. When storing unbounded types in a BTreeMap, nodes are represented as linked lists of memory chunks. The issue occurs during node deallocation where only the first memory chunk is deallocated while the remaining chunks stay incorrectly allocated, resulting in a memory leak (GitHub PR).
The vulnerability affects the deallocation process of BTreeMap nodes when handling overflow conditions. When a node contains multiple memory chunks in a linked list structure, the deallocation routine fails to properly clean up all chunks beyond the first one, leading to persistent memory allocation of unused chunks (GitHub PR).
The vulnerability results in memory leaks when deallocating nodes in BTreeMap structures, potentially leading to increased memory usage over time as the leaked memory chunks remain allocated but inaccessible (GitHub PR).
The issue has been fixed by modifying the node deallocation logic to ensure all memory chunks associated with a node are properly deallocated. Additional tests have been implemented to prevent similar regressions in the future (GitHub PR).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."