Lucene search

K
osvGoogleOSV:RUSTSEC-2021-0054
HistoryApr 28, 2021 - 12:00 p.m.

Archives may contain uninitialized memory

2021-04-2812:00:00
Google
osv.dev
8
archives
uninitialized memory
serialization
security risk
rkyv

EPSS

0.002

Percentile

53.8%

rkyv is a serialization framework that writes struct-compatible memory to be stored or
transmitted. During serialization, struct padding bytes and unused enum bytes may not be
initialized. These bytes may be written to disk or sent over unsecured channels.

EPSS

0.002

Percentile

53.8%

Related for OSV:RUSTSEC-2021-0054