Lucene search
GoogleOSV:GHSA-8FGG-5V78-6G76HistoryAug 25, 2021 - 8:52 p.m.
Deserializing an array can free uninitialized memory in byte_struct
2021-08-2520:52:03
Google
osv.dev
12
deserialization
array
uninitialized memory
byte_struct
rust
software
drop
deserialization method panic
EPSS
0.002
Percentile
61.5%
Byte_struct stack and unpack structure as raw bytes with packed or bit field layout. An issue was discovered in the byte_struct crate before 0.6.1 for Rust. There can be a drop of uninitialized memory if a certain deserialization method panics.
Related
prion
prion
Deserialization of untrusted data
2021-03-05 09:15:00
nvd
nvd
CVE-2021-28033
2021-03-05 09:15:14
cvelist
cvelist
CVE-2021-28033
2021-03-05 08:38:21
rustsec
rustsec
Deserializing an array can drop uninitialized memory on panic
2021-03-01 12:00:00
osv
osv
Deserializing an array can drop uninitialized memory on panic
2021-03-01 12:00:00
cve
cve
CVE-2021-28033
2021-03-05 09:15:14
github
github
Deserializing an array can free uninitialized memory in byte_struct
2021-08-25 20:52:03