1675 matches found
CVE-2021-45689
An issue was discovered in the gfx-auxil crate through 2021-01-07 for Rust. gfxauxil::readspirv may read from uninitialized memory locations...
CVE-2021-45688
An issue was discovered in the ash crate before 0.33.1 for Rust. util::readspv may read from uninitialized memory locations...
CVE-2021-45703
An issue was discovered in the tectonicxdv crate before 0.1.12 for Rust. XdvParser::::process may read from uninitialized memory locations...
CVE-2021-45692
An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserializeextensionothers may read from uninitialized memory locations...
Memory corruption
An issue was discovered in the binjsio crate through 2021-01-03 for Rust. The Read method may read from uninitialized memory locations...
Memory corruption
An issue was discovered in the csv-sniffer crate through 2021-01-05 for Rust. preambleskipcount may read from uninitialized memory locations...
Memory corruption
An issue was discovered in the accreader crate through 2020-12-27 for Rust. fillbuf may read from uninitialized memory locations...
Memory corruption
An issue was discovered in the columnar crate through 2021-01-07 for Rust. ColumnarReadExt::readtypedvec may read from uninitialized memory locations...
Memory corruption
An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserializestringprimitive may read from uninitialized memory locations...
Memory corruption
An issue was discovered in the ash crate before 0.33.1 for Rust. util::readspv may read from uninitialized memory locations...
CVE-2020-36511
An issue was discovered in the bite crate through 2020-12-31 for Rust. read::BiteReadExpandedExt::readframedmax may read from uninitialized memory locations...
CVE-2020-36512
An issue was discovered in the buffoon crate through 2020-12-31 for Rust. InputStream::readexact may read from uninitialized memory locations...
CVE-2021-45682
The CVE-2021-45682 entry concerns the bronzedb-protocol crate for Rust, for versions through 2021-01-03. The root issue is that ReadKVExt may read from uninitialized memory locations, which can lead to undefined behavior and potential memory exposure. Public-environment advisories (OSV, Red Hat, ...
CVE-2021-45683
The CVE-2021-45683 issue affects the Rust crate binjs_io (pre-2021-01-03). The Read method may read from uninitialized memory locations, causing memory exposure and potential undefined behavior. Public advisories (e.g., RUSTSEC-2021-0085, GHSA-CW4J-CF6C-MMFV, GHSA-C6PX-4GRW-HRJR, OSV entries) des...
CVE-2021-45684
The CVE-2021-45684 issue affects the Rust crate flumedb, where read_entry may read from uninitialized memory locations. This can lead to memory exposure and undefined behavior in affected builds. The vulnerability is described consistently across sources (NVD, Red Hat, OSV/GHSA) as an uninitializ...
CVE-2021-23772
This affects all versions of package github.com/kataras/iris; all versions of package github.com/kataras/iris/v12. The unsafe handling of file names during upload using UploadFormFiles method may enable attackers to write to arbitrary locations outside the designated target folder...
Iris 后置链接漏洞
Iris is a fast, simple, yet full-featured and very efficient Go web framework. A security vulnerability exists in iris version 12, which stems from the program's insecure handling of filenames during uploads using the UploadFormFiles method could allow an attacker to write to an arbitrary locatio...
CVE-2021-45450
In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psaciphergenerateiv and psacipherencrypt allow policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application...
