CVE-2021-28032

CVE-2021-28032 is a critical vulnerability affecting the nano_arena crate for Rust, specifically versions prior to 0.5.2. It stems from an aliasing violation in the split_at function, allowing two mutable references to the same element, which can lead to out-of-bounds writes or use-after-free conditions. With a CVSS score of 9.8, this vulnerability is easily exploitable over the network with no user interaction, potentially resulting in complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is currently no known active exploitation, public exploit code, or significant community discussion surrounding this CVE.