Lucene search

K
rustsecRustsecRUSTSEC-2021-0043
HistoryFeb 17, 2021 - 12:00 p.m.

PartialReader passes uninitialized memory to user-provided Read

2021-02-1712:00:00
rustsec.org
8
partialreader
uninitialized memory
user-provided read
undefined behavior

EPSS

0.001

Percentile

48.3%

Affected versions of this crate passed an uniniitalized buffer to a
user-provided Read instance in PartialReader::read.

This can result in safe Read implementations reading from the uninitialized
buffer leading to undefined behavior.

The flaw was fixed in commit 39d62c6
by zero-initializing the passed buffer.

EPSS

0.001

Percentile

48.3%

Related for RUSTSEC-2021-0043