Rust messagepack-rs crate security vulnerability

Rust messagepack-rs crate is messagepack-rs is a pure Rust MessagePack implementation. A security vulnerability exists in Rust messagepack-rs crate in versions prior to 2021-01-26, which stems from the fact that deserializestringprimitive can read data from uninitialized memory locations...

Rust messagepack-rs crate security vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. rust messagepack-rs crate has a security vulnerability in versions prior to 2021-01-26, which could be exploited by attackers to read data from uninitialized memory locations...

Rust messagepack-rs crate security vulnerability

Rust messagepack-rs crate is messagepack-rs is a pure Rust MessagePack implementation. A security vulnerability exists in Rust messagepack-rs crate in versions prior to 2021-01-26, which stems from the fact that deserializeextensionothers can read data from uninitialized memory locations...

CVE-2021-45690

CVE-2021-45690 affects the Rust crate messagepack-rs. The issue is in deserialization: deserialize_binary (and related paths) may read from uninitialized memory locations, leading to potential undefined behavior in safe Read implementations. Documented targets include deserialize_binary, deserial...

CVE-2021-45690

An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserializebinary may read from uninitialized memory locations...

CVE-2021-45690

An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserializebinary may read from uninitialized memory locations...

CVE-2021-45691

CVE-2021-45691 affects the Rust crate messagepack-rs (through 2021-01-26). The issue is that deserialize_string may read from uninitialized memory locations, leading to potentially unsafe reads. According to NVD, the vulnerability has a CVSS v3.1 base score of 9.8 (CRITICAL) with network attack v...

CVE-2021-45691

An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserializestring may read from uninitialized memory locations...

CVE-2021-45691

An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserializestring may read from uninitialized memory locations...

CVE-2021-45692

The CVE-2021-45692 issue affects the Rust crate messagepack-rs. Affected component: deserialize_extension_others (and related paths like deserialize_binary, deserialize_string, deserialize_string_primitive) may read from uninitialized memory locations, potentially causing undefined behavior or me...

CVE-2021-45692

An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserializeextensionothers may read from uninitialized memory locations...

CVE-2021-45692

An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserializeextensionothers may read from uninitialized memory locations...

CVE-2021-45693

The CVE-2021-45693 entry concerns the Rust crate messagepack-rs (through 2021-01-26). The vulnerability affects the deserialize_string_primitive function, which may read from uninitialized memory locations, potentially leading to memory corruption. Public references include Red Hat and OSV entrie...

CVE-2021-45693

An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserializestringprimitive may read from uninitialized memory locations...

CVE-2021-45693

An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserializestringprimitive may read from uninitialized memory locations...

CVE-2021-45693: Use of Uninitialized Resource

An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserializestringprimitive may read from uninitialized memory locations...

CVE-2021-45690: Use of Uninitialized Resource

An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserializebinary may read from uninitialized memory locations...

CVE-2021-45691: Use of Uninitialized Resource

An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserializestring may read from uninitialized memory locations...

CVE-2021-45692: Use of Uninitialized Resource

An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserializeextensionothers may read from uninitialized memory locations...

GHSA-GMJW-49P4-PCFM Prototype poisoning

Impact The issue is as follows: when msgpack5 decodes a map containing a key "proto", it assigns the decoded value to proto. As you are no doubt aware, Object.prototype.proto is an accessor property for the receiver's prototype. If the value corresponding to the key proto decodes to an object or...