Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-78756
HistorySep 23, 2021 - 12:00 a.m.

Mozilla Rust Buffer Overflow Vulnerability (CNVD-2021-78756)

2021-09-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
mozilla foundation
buffer overflow
rust
vulnerability
memory corruption
exploitation
ticketed lock
cnvd-2021-78756

EPSS

0.002

Percentile

61.8%

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. buffer overflow vulnerabilities exist in versions of Mozilla Rust prior to 0.3.0, stemming from the ticketed_lock crate in Rust. there are unconditional Send implementations for ReadTicket<T> and WriteTicket<T>, which can be exploited to cause memory corruption or other undefined behavior. The vulnerability can be exploited by attackers to cause memory corruption or other undefined behavior.

EPSS

0.002

Percentile

61.8%