Lucene search
GoogleOSV:GHSA-M325-RXJV-PWPHHistoryJun 17, 2022 - 12:11 a.m.
Deserialization functions pass uninitialized memory to user-provided Read
2022-06-1700:11:41
Google
osv.dev
6
0.002 Low
EPSS
Percentile
59.7%
Affected versions of this crate passed an uninitialized buffer to a
user-provided Read instance in:
deserialize_binarydeserialize_stringdeserialize_extension_othersdeserialize_string_primitive
This can result in safe Read implementations reading from the uninitialized
buffer leading to undefined behavior.
| CPE | Name | Operator | Version |
|---|---|---|---|
| messagepack-rs | le | 0.8.1 |
Related
osv
osv
Use of Uninitialized Resource in messagepack-rs
2022-01-06 22:12:35
Use of Uninitialized Resource in messagepack-rs.
2022-01-06 22:12:28
Use of Uninitialized Resource in messagepack-rs.
2022-01-06 22:12:42
rustsec
rustsec
Deserialization functions pass uninitialized memory to user-provided Read
2021-01-26 12:00:00
cnvd
cnvd
Mozilla Rust messagepack-rs crate file reading vulnerability
2021-12-28 00:00:00
prion
prion
Memory corruption
2021-12-27 00:15:00
Memory corruption
2021-12-27 00:15:00
Memory corruption
2021-12-27 00:15:00
cve
cve
cvelist
cvelist
github
github
Use of Uninitialized Resource in messagepack-rs
2022-01-06 22:12:35
Use of Uninitialized Resource in messagepack-rs.
2022-01-06 22:12:28
Use of Uninitialized Resource in messagepack-rs.
2022-01-06 22:11:46
nvd
nvd