{"metadata": {"vulnerability": "CVE-2022-36086", "count": 26, "kinds": {"milestone": 6, "sighting": 2, "kev": 0, "other": 18}}, "data": [{"timestamp": "2022-07-15T00:00:00Z", "date_only": false, "value": "2022-07-15T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-36086", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-09-07T12:00:00Z", "date_only": false, "value": "2022-09-07T12:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_rustsec \u00b7 RUSTSEC-2022-0063", "record": "RUSTSEC-2022-0063", "field": "published"}, {"timestamp": "2022-09-07T22:50:09Z", "date_only": false, "value": "2022-09-07T22:50:09.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-36086", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-09-07T22:50:09Z", "date_only": false, "value": "2022-09-07T22:50:09.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2022-36086", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-09-07T23:15:00Z", "date_only": false, "value": "2022-09-07T23:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-XG8P-34W2-J49J", "record": "GHSA-XG8P-34W2-J49J", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-09-07T23:15:00Z", "date_only": false, "value": "2022-09-07T23:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-36086", "record": "GSD-2022-36086", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-09-07T23:15:14.097Z", "date_only": false, "value": "2022-09-07T23:15:14.097", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-36086", "record": "FKIE_CVE-2022-36086", "field": "published"}, {"timestamp": "2022-09-08T02:14:35Z", "date_only": false, "value": "2022-09-08T02:14:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/49415", "record": "CVE-2022-36086", "field": "creation_timestamp", "uuid": "f9b5e528-e1c8-46c4-9d83-cccd479076ca", "content": "\u203c CVE-2022-36086 \u203c\n\nlinked_list_allocator is an allocator usable for no_std systems. Prior to version 0.10.2, the heap initialization methods were missing a minimum size check for the given heap size argument. This could lead to out-of-bound writes when a heap was initialized with a size smaller than `3 * size_of::` because of metadata write operations. This vulnerability impacts all the initialization functions on the `Heap` and `LockedHeap` types, including `Heap::new`, `Heap::init`, `Heap::init_from_slice`, and `LockedHeap::new`. It also affects multiple uses of the `Heap::extend` method. Version 0.10.2 contains a patch for the issue. As a workaround, ensure that the heap is only initialized with a size larger than `3 * size_of::` and that the `Heap::extend` method is only called with sizes larger than `2 * size_of::()`. Also, ensure that the total heap size is (and stays) a multiple of `2 * size_of::()`.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/49415"}, {"timestamp": "2022-09-16T17:41:33Z", "date_only": false, "value": "2022-09-16T17:41:33Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-XG8P-34W2-J49J", "record": "GHSA-XG8P-34W2-J49J", "field": "published"}, {"timestamp": "2022-09-16T17:41:33Z", "date_only": false, "value": "2022-09-16T17:41:33Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-XG8P-34W2-J49J", "record": "GHSA-XG8P-34W2-J49J", "field": "modified"}, {"timestamp": "2022-12-01T14:07:57Z", "date_only": false, "value": "2022-12-01T14:07:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/78713", "record": "CVE-2022-36086", "field": "creation_timestamp", "uuid": "1892db48-da20-4e3e-a539-357109b27c93", "content": "How Mayhem Helped Uncover a Security Vulnerability in RustOS (CVE-2022-36086)\n\nhttps://ift.tt/hQtZVrf", "url": "https://t.me/ctinow/78713"}, {"timestamp": "2023-07-21T19:23:00Z", "date_only": false, "value": "2023-07-21T19:23Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-36086", "record": "GSD-2022-36086", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:19:21.753Z", "date_only": false, "value": "2023-12-13T01:19:21.753245Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-36086", "record": "GSD-2022-36086", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12469-1", "record": "OPENSUSE-SU-2024:12469-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12469-1", "record": "OPENSUSE-SU-2024:12469-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12469-1", "record": "OPENSUSE-SU-2024:12469-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12469-1", "record": "OPENSUSE-SU-2024:12469-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-08-03T09:52:00.524Z", "date_only": false, "value": "2024-08-03T09:52:00.524Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-36086", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-22T15:42:12.682Z", "date_only": false, "value": "2025-04-22T15:42:12.682877Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-36086", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-04-22T15:42:12.682Z", "date_only": false, "value": "2025-04-22T15:42:12.682877Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-36086", "record": "FKIE_CVE-2022-36086", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-22T17:23:22.210Z", "date_only": false, "value": "2025-04-22T17:23:22.210Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-36086", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-04-22T17:23:22.210Z", "date_only": false, "value": "2025-04-22T17:23:22.210Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-36086", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T04:52:53.377Z", "date_only": false, "value": "2026-06-17T04:52:53.377", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-36086", "record": "FKIE_CVE-2022-36086", "field": "lastModified"}, {"timestamp": "2026-09-20T20:39:26Z", "date_only": false, "value": "2026-09-20T20:39:26Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12469-1", "record": "OPENSUSE-SU-2024:12469-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T20:39:26Z", "date_only": false, "value": "2026-09-20T20:39:26Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12469-1", "record": "OPENSUSE-SU-2024:12469-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-12T17:47:59Z", "date_only": false, "value": "2026-10-12T17:47:59Z", "kind": "other", "label": "Updated", "source": "osv_rustsec \u00b7 RUSTSEC-2022-0063", "record": "RUSTSEC-2022-0063", "field": "modified"}]}