cve/2020/CVE-2020-36318.md

### [CVE-2020-36318](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36318)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than once under certain condition. This bug could result in a use-after-free or double free.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/Ainevsia/HF2022-vdq-mva-fpbe-static
- https://github.com/Qwaz/rust-cve
- https://github.com/shubhamkulkarni97/CVE-Presentations