Lucene search

K
osvGoogleOSV:GHSA-8FGG-5V78-6G76
HistoryAug 25, 2021 - 8:52 p.m.

Deserializing an array can free uninitialized memory in byte_struct

2021-08-2520:52:03
Google
osv.dev
10

EPSS

0.002

Percentile

61.5%

Byte_struct stack and unpack structure as raw bytes with packed or bit field layout. An issue was discovered in the byte_struct crate before 0.6.1 for Rust. There can be a drop of uninitialized memory if a certain deserialization method panics.

EPSS

0.002

Percentile

61.5%

Related for OSV:GHSA-8FGG-5V78-6G76