cdr crate before for Rust 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Deserializer :: readvec in the cdr package of Rust prior to 0.2.4, which stems from the fact that the user-supplied read implementation of Deserializer :: readvec can access th...

PT-2021-16992

Name of the Vulnerable Software and Affected Versions cdr crate versions prior to 0.2.4 Description An issue was discovered in Deserializer::read vec in the cdr crate for Rust. A user-provided Read implementation can gain access to the old contents of newly allocated heap memory, violating...