CVE-2020-35888: Arr Project Arr

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

An issue was discovered in the arr crate through 2020-08-25 for Rust. Uninitialized memory is dropped by Array::new_from_template.

Affected products

• Arr Project Arr: up to and including 2020-08-25

Published 2020-12-31. Last modified 2026-06-17.