CVE-2021-25902

HIGH 7.5CVE-2021-25902 · Published 26/01/2021 · updated 17/06/2026

In short

CVE-2021-25902 is a HIGH (CVSS 7.5) vulnerability affecting glsl-layout (glsl-layout project).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 72.8% of all vulnerabilities.
Fix: update to 0.4.0 or later.

Package	Affected versions	Patched versions
glsl-layout glsl-layout_project	`< 0.4.0`	`0.4.0`

An issue was discovered in the glsl-layout crate before 0.4.0 for Rust. When a panic occurs, map_array can perform a double drop.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.