AIKIDO-2025-10920
small-map is vulnerable to Use of Uninitialized Resource
44
Medium Risk
This Affects:
small-mapTL;DR
Affected versions of this package are vulnerable to Uninitialized Memory Access in RawInline::clone(), where the clone function incorrectly assumed data was stored contiguously, so after deletions, control bytes pointed to uninitialized memory. An attacker could exploit this by manipulating map deletions to induce cloning, potentially reading uninitialized memory to disclose sensitive information or cause memory corruption.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
small-map is vulnerable to Use of Uninitialized Resource in versions 0.1.0 - 0.1.3.
How to fix this
Upgrade the small-map library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant