CVE-2018-21000

An issue was discovered in the safe-transmute crate before 0.10.1 for Rust. A constructor's arguments are in the wrong order, causing heap memory corruption.

• CWE-119

• https://github.com/nabijaczleweli/safe-transmute-rs/pull/36Patch, Third Party Advisory
• https://rustsec.org/advisories/RUSTSEC-2018-0013.htmlThird Party Advisory
• https://github.com/nabijaczleweli/safe-transmute-rs/pull/36Patch, Third Party Advisory
• https://rustsec.org/advisories/RUSTSEC-2018-0013.htmlThird Party Advisory

Published

Aug 26, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-20995An issue was discovered in the slice-deque crate before 0.1.…
• CVE-2018-20996An issue was discovered in the crossbeam crate before 0.4.1 …
• CVE-2018-20997An issue was discovered in the openssl crate before 0.10.9 f…
• CVE-2018-20998An issue was discovered in the arrayfire crate before 3.6.0 …
• CVE-2018-20999An issue was discovered in the orion crate before 0.11.2 for…
• CVE-2018-2100Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-21001The anycomment plugin before 0.0.33 for WordPress has XSS.
• CVE-2018-21002The js-support-ticket plugin before 2.0.6 for WordPress has …
• CVE-2018-21003The buddyforms plugin before 2.2.8 for WordPress has SQL inj…
• CVE-2018-21004The rsvpmaker plugin before 5.6.4 for WordPress has SQL inje…
• CVE-2018-21005The bbp-move-topics plugin before 1.1.6 for WordPress has co…
• CVE-2018-21006The bbp-move-topics plugin before 1.1.6 for WordPress has CS…