Lucene search
China National Vulnerability DatabaseCNVD-2022-04511HistoryDec 28, 2021 - 12:00 a.m.
Mozilla Rust messagepack-rs crate file reading vulnerability
2021-12-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
3
0.002 Low
EPSS
Percentile
59.7%
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. rust messagepack-rs crate has a security vulnerability in versions prior to 2021-01-26, which could be exploited by attackers to read data from uninitialized memory locations.
Related
prion
prion
Memory corruption
2021-12-27 00:15:00
cve
cve
CVE-2021-45691
2021-12-27 00:15:09
github
github
Use of Uninitialized Resource in messagepack-rs
2022-01-06 22:12:35
cvelist
cvelist
CVE-2021-45691
2021-12-26 21:50:58
nvd
nvd
CVE-2021-45691
2021-12-27 00:15:09
osv
osv
Use of Uninitialized Resource in messagepack-rs
2022-01-06 22:12:35
Use of Uninitialized Resource in messagepack-rs.
2022-01-06 22:12:28
Use of Uninitialized Resource in messagepack-rs.
2022-01-06 22:12:42
rustsec
rustsec
Deserialization functions pass uninitialized memory to user-provided Read
2021-01-26 12:00:00