Lucene search

K
osvGoogleOSV:CVE-2021-43620
HistoryNov 15, 2021 - 5:15 a.m.

CVE-2021-43620

2021-11-1505:15:07
Google
osv.dev
3

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

45.7%

An issue was discovered in the fruity crate through 0.2.0 for Rust. Security-relevant validation of filename extensions is plausibly affected. Methods of NSString for conversion to a string may return a partial result. Because they call CStr::from_ptr on a pointer to the string buffer, the string is terminated at the first ‘\0’ byte, which might not be the end of the string.

CPENameOperatorVersion
fruityeq0.1.0
fruityeq0.2.0

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

45.7%