as far as i can see, it's just programming errors, nothing to do with rust.
But sudo has its share of CVEs as well (latest CVE-2025-32463), so perhaps a fresh look on the tool is warranted; perhaps some learnings have been taken from it.
(Obligatory disclaimer: I love rust, I hate fanboys and rewrites)