Lucene search
China National Vulnerability DatabaseCNVD-2022-04510HistoryDec 28, 2021 - 12:00 a.m.
Mozilla Rust messagepack-rs crate file reading vulnerability (CNVD-2022-04510)
2021-12-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
4
mozilla foundation
rust
messagepack-rs crate
security vulnerability
uninitialized memory location
file reading
EPSS
0.002
Percentile
62.1%
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. rust messagepack-rs crate has a security vulnerability in versions prior to 2021-01-26, which can be exploited by attackers to deserialize_binary to read data from an uninitialized memory location.
Related
cvelist
cvelist
CVE-2021-45690
2021-12-26 21:51:15
nvd
nvd
CVE-2021-45690
2021-12-27 00:15:09
prion
prion
Memory corruption
2021-12-27 00:15:00
github
github
Use of Uninitialized Resource in messagepack-rs.
2022-01-06 22:11:46
cve
cve
CVE-2021-45690
2021-12-27 00:15:09
osv
osv
Use of Uninitialized Resource in messagepack-rs
2022-01-06 22:12:35
Use of Uninitialized Resource in messagepack-rs.
2022-01-06 22:12:28
Use of Uninitialized Resource in messagepack-rs.
2022-01-06 22:12:42
rustsec
rustsec
Deserialization functions pass uninitialized memory to user-provided Read
2021-01-26 12:00:00