Listen to this Post
How the CVE Works
The vulnerability in `slab` v0.4.10 stems from an incorrect bounds check in the `get_disjoint_mut` method. Instead of validating whether indices were within the slab’s initialized length, the method only checked if they were within the allocated capacity. This oversight allowed attackers to access uninitialized memory regions, leading to undefined behavior, potential crashes, or memory corruption. The flaw could be exploited by passing carefully crafted indices to the function, bypassing intended safety checks.
DailyCVE Form
Platform: `slab`
Version: 0.4.10
Vulnerability: Out-of-bounds access
Severity: Medium
Date: Aug 11, 2025
Prediction: Patch expected Aug 11, 2025
What Undercode Say
let slab = Slab::with_capacity(10); slab.get_disjoint_mut([5, 15]); // OOB access
How Exploit
- Craft malicious indices
- Trigger UB via uninitialized memory
- Potential crash/RCE
Protection from this CVE
- Upgrade to v0.4.11
- Manual bounds checks
- Avoid untrusted indices
Impact
- Memory corruption
- Undefined behavior
- Denial-of-service
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: github.com
Extra Source Hub:
Undercode
