12755 matches found
CVE-2019-25054
An issue was discovered in the pnet crate before 0.27.2 for Rust. There is a segmentation fault upon attempted dereference of an uninitialized descriptor because of an erroneous IcmpTransportChannelIterator compiler optimization...
CVE-2019-25054
CVE-2019-25054 affects the Rust pnet crate prior to 0.27.2. The issue causes a segmentation fault when dereferencing an uninitialized descriptor due to an erroneous IcmpTransportChannelIterator compiler optimization. The practical impact is a crash; remediation is to upgrade to 0.27.2 or later (w...
CVE-2019-25055
The CVE-2019-25055 entry concerns the libpulse-binding crate for Rust (pre-2.6.0). The issue is a panic that is mishandled across an FFI boundary, causing undefined behavior. Affected versions prior to 2.6.0 expose a boundary error in the FFI during panic propagation; this is the underlying root ...
CVE-2020-36511
CVE-2020-36511 affects the Rust bite crate (through 2020-12-31). The issue is in read::BiteReadExpandedExt::read_framed_max, which may read from uninitialized memory, causing undefined behavior/memory corruption. Multiple connected sources (NVD/NVD-derived entries, RustSec advisories, OSV entries...
CVE-2020-36511
An issue was discovered in the bite crate through 2020-12-31 for Rust. read::BiteReadExpandedExt::readframedmax may read from uninitialized memory locations...
CVE-2020-36511
An issue was discovered in the bite crate through 2020-12-31 for Rust. read::BiteReadExpandedExt::readframedmax may read from uninitialized memory locations...
CVE-2020-36512
The CVE-2020-36512 entry concerns the Rust crate buffoon (through 2020-12-31). Affected code path: InputStream::read_exact may read from uninitialized memory, causing undefined behavior and potential memory exposure. Documented in multiple feeds (NVD, Red Hat, OSV, CNVD, etc.) with UB implication...
CVE-2020-36512
An issue was discovered in the buffoon crate through 2020-12-31 for Rust. InputStream::readexact may read from uninitialized memory locations...
CVE-2020-36513
An issue was discovered in the accreader crate through 2020-12-27 for Rust. readupto may read from uninitialized memory locations...
CVE-2020-36513
An issue was discovered in the accreader crate through 2020-12-27 for Rust. readupto may read from uninitialized memory locations...
CVE-2020-36513
CVE-2020-36513 concerns the Rust crate acc_reader (up to 2020-12-27) where the read_up_to function may read from uninitialized memory locations. Multiple connected advisories (including GHSA entries and national/DNS variants) describe uninitialized buffers being exposed through Read implementatio...
CVE-2020-36514
An issue was discovered in the accreader crate through 2020-12-27 for Rust. fillbuf may read from uninitialized memory locations...
CVE-2020-36514
The CVE-2020-36514 issue affects the acc_reader crate for Rust (through 2020-12-27). The vulnerability is that fill_buf (and related read_up_to paths) may read from uninitialized memory, allowing potential memory exposure. Multiple connected advisories (OSV GHSA entries, Red Hat and CNVD entries,...
CVE-2020-36514
An issue was discovered in the accreader crate through 2020-12-27 for Rust. fillbuf may read from uninitialized memory locations...
CVE-2021-45680
CVE-2021-45680 concerns the vec-const crate (Rust) prior to 2.0.0, where a vector is constructed from a pointer to a const slice, leading to memory corruption. Several sources (OSV/RUSTSEC and CVE records) confirm the affected component and the root cause. Impact is memory corruption; exact explo...
CVE-2021-45680
An issue was discovered in the vec-const crate before 2.0.0 for Rust. It tries to construct a Vec from a pointer to a const slice, leading to memory corruption...
CVE-2021-45680
An issue was discovered in the vec-const crate before 2.0.0 for Rust. It tries to construct a Vec from a pointer to a const slice, leading to memory corruption. Converted from WS-2021-0358, on 2022-11-07...
CVE-2021-45681
An issue was discovered in the derive-com-impl crate before 0.1.2 for Rust. An invalid reference and memory corruption can occur because AddRef might not be called before returning a pointer...
CVE-2021-45681
CVE-2021-45681 affects the Rust crate derive-com-impl prior to 0.1.2. The issue is an invalid reference leading to memory corruption because AddRef may not be called before returning a pointer. Multiple sources (OSV/RUSTSEC/RUST) detail the same root cause and note the fix was committed (9803f31f...