Lucene search

K
osvGoogleOSV:RUSTSEC-2021-0092
HistoryJan 26, 2021 - 12:00 p.m.

Deserialization functions pass uninitialized memory to user-provided Read

2021-01-2612:00:00
Google
osv.dev
4

0.002 Low

EPSS

Percentile

59.6%

Affected versions of this crate passed an uninitialized buffer to a
user-provided Read instance in:

  • deserialize_binary
  • deserialize_string
  • deserialize_extension_others
  • deserialize_string_primitive

This can result in safe Read implementations reading from the uninitialized
buffer leading to undefined behavior.

0.002 Low

EPSS

Percentile

59.6%

Related for OSV:RUSTSEC-2021-0092