12755 matches found
CVE-2021-45690
An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserializebinary may read from uninitialized memory locations...
CVE-2021-45691
CVE-2021-45691 affects the Rust crate messagepack-rs (through 2021-01-26). The issue is that deserialize_string may read from uninitialized memory locations, leading to potentially unsafe reads. According to NVD, the vulnerability has a CVSS v3.1 base score of 9.8 (CRITICAL) with network attack v...
CVE-2021-45691
An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserializestring may read from uninitialized memory locations...
CVE-2021-45691
An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserializestring may read from uninitialized memory locations...
CVE-2021-45692
The CVE-2021-45692 issue affects the Rust crate messagepack-rs. Affected component: deserialize_extension_others (and related paths like deserialize_binary, deserialize_string, deserialize_string_primitive) may read from uninitialized memory locations, potentially causing undefined behavior or me...
CVE-2021-45692
An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserializeextensionothers may read from uninitialized memory locations...
CVE-2021-45692
An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserializeextensionothers may read from uninitialized memory locations...
CVE-2021-45693
The CVE-2021-45693 entry concerns the Rust crate messagepack-rs (through 2021-01-26). The vulnerability affects the deserialize_string_primitive function, which may read from uninitialized memory locations, potentially leading to memory corruption. Public references include Red Hat and OSV entrie...
CVE-2021-45693
An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserializestringprimitive may read from uninitialized memory locations...
CVE-2021-45693
An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserializestringprimitive may read from uninitialized memory locations...
CVE-2021-45694
An issue was discovered in the rdiff crate through 2021-02-03 for Rust. Window may read from uninitialized memory locations...
CVE-2021-45694
An issue was discovered in the rdiff crate through 2021-02-03 for Rust. Window may read from uninitialized memory locations...
CVE-2021-45694
The CVE-2021-45694 issue affects the Rust rdiff crate, with vulnerability described as a window may read from uninitialized memory locations. Multiple connected records (OSV entries, GitHub advisory GHSA- codes, CNVD/CNNVD, NVD, and RustSec references) corroborate that the defect involves reading...
CVE-2021-45695
An issue was discovered in the mopa crate through 2021-06-01 for Rust. It incorrectly relies on Trait memory layout, possibly leading to future occurrences of arbitrary code execution or ASLR bypass...
CVE-2021-45695
CVE-2021-45695 concerns the Rust crate mopa, which redefines the deprecated TraitObject to downcast trait objects. The core issue is reliance on the memory layout of &dyn Trait, risking memory-layout changes by the compiler and enabling scenarios such as ASLR bypass or even arbitrary code executi...
CVE-2021-45696
CVE-2021-45696 pertains to the Rust sha2 crate, specifically version 0.9.7 before 0.9.8. The issue arises when the AVX2-accelerated backend is automatically enabled on x86/x86_64 targets, causing hashes of long messages to be incorrect. Public reports in OSV and CVE records confirm the root cause...
CVE-2021-45696
An issue was discovered in the sha2 crate 0.9.7 before 0.9.8 for Rust. Hashes of long messages may be incorrect when the AVX2-accelerated backend is used...
CVE-2021-45697
An issue was discovered in the molecule crate before 0.7.2 for Rust. A FixVec partial read has an incorrect result...
CVE-2021-45697
Summary: CVE-2021-45697 affects the Rust crate molecule prior to 0.7.2. The root cause is an incorrect result in a FixVec partial read, leading to incorrect read lengths/results. The vulnerability is tied to the FixVec handling in molecule, with impact described as incorrect read behavior; exploi...