CVE-2025-55159

A flaw was found in slab. The get_disjoint_mut method incorrectly validates index boundaries against the slab's capacity rather than its length, enabling a local attacker to access uninitialized memory. This memory access occurs when requesting disjoint mutable references within the slab. Consequently, this can lead to information disclosure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this flaw avoid using get_disjoint_mut with indices that might be beyond the slab's actual length