Lucene search

K
rustsecRustsecRUSTSEC-2021-0092
HistoryJan 26, 2021 - 12:00 p.m.

Deserialization functions pass uninitialized memory to user-provided Read

2021-01-2612:00:00
rustsec.org
6

0.002 Low

EPSS

Percentile

59.7%

Affected versions of this crate passed an uninitialized buffer to a
user-provided Read instance in:

  • deserialize_binary
  • deserialize_string
  • deserialize_extension_others
  • deserialize_string_primitive

This can result in safe Read implementations reading from the uninitialized
buffer leading to undefined behavior.

CPENameOperatorVersion
messagepack-rseqany

0.002 Low

EPSS

Percentile

59.7%

Related for RUSTSEC-2021-0092