Lucene search
GoogleOSV:GHSA-PPQP-78XX-3R38HistoryAug 25, 2021 - 8:53 p.m.
Out of bounds write in calamine
2021-08-2520:53:25
Google
osv.dev
4
calamine
rust
issue
overwrite
heap-memory
vec::set_len
uninitialized memory
user-provided
read operation
EPSS
0.005
Percentile
76.7%
An issue was discovered in the calamine crate before 0.17.0 for Rust. It allows attackers to overwrite heap-memory locations because Vec::set_len is used without proper memory claiming, and this uninitialized memory is used for a user-provided Read operation, as demonstrated by Sectors::get.
Related
cve
cve
CVE-2021-26951
2021-02-09 23:15:13
cvelist
cvelist
CVE-2021-26951
2021-02-09 22:07:49
prion
prion
Design/Logic Flaw
2021-02-09 23:15:00
osv
osv
`Sectors::get` accesses unclaimed/uninitialized memory
2021-01-06 12:00:00
CVE-2021-26951
2021-02-09 23:15:13
github
github
Out of bounds write in calamine
2021-08-25 20:53:25
rustsec
rustsec
`Sectors::get` accesses unclaimed/uninitialized memory
2021-01-06 12:00:00
nvd
nvd
CVE-2021-26951
2021-02-09 23:15:13