Lucene search

K
rustsecRustsecRUSTSEC-2021-0054
HistoryApr 28, 2021 - 12:00 p.m.

Archives may contain uninitialized memory

2021-04-2812:00:00
rustsec.org
17
archives
uninitialized memory
rkyv serialization
struct padding bytes
unused enum bytes
disk
unsecured channels
software

EPSS

0.002

Percentile

53.8%

rkyv is a serialization framework that writes struct-compatible memory to be stored or
transmitted. During serialization, struct padding bytes and unused enum bytes may not be
initialized. These bytes may be written to disk or sent over unsecured channels.

EPSS

0.002

Percentile

53.8%

Related for RUSTSEC-2021-0054