```toml
[advisory]
id = "CVE-2020-36318"
package = "std"
categories = ["memory-corruption"]
date = "2020-12-07"
url = "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36318"

[versions]
patched = [">= 1.49.0"]
unaffected = ["< 1.48.0"]
```

# VecDeque::make_contiguous may duplicate the contained elements

In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than once under certain condition. This bug could result in a use-after-free or double free.