CVE-2021-25756: Undefined Security Weakness

In JetBrains IntelliJ IDEA before 2020.2, HTTP links were used for several remote repositories instead of HTTPS...

CVE-2021-25769: Undefined Security Weakness

In JetBrains YouTrack before 2020.4.6808, the YouTrack administrator wasn't able to access attachments...

KeyValueReader passes uninitialized memory to Read instance

The KeyValueReader type in affected versions of this crate set up an uninitialized memory buffer and passed them to be read in to a user-provided Read instance. The Read instance could read uninitialized memory and cause undefined behavior and miscompilations. This issue was fixed in commit dd59b...

RUSTSEC-2021-0051 KeyValueReader passes uninitialized memory to Read instance

The KeyValueReader type in affected versions of this crate set up an uninitialized memory buffer and passed them to be read in to a user-provided Read instance. The Read instance could read uninitialized memory and cause undefined behavior and miscompilations. This issue was fixed in commit dd59b...

PT-2021-18731

Name of the Vulnerable Software and Affected Versions outer cgi crate versions prior to 0.2.1 Description An issue in the outer cgi crate allows a user-provided Read instance to receive an uninitialized memory buffer from KeyValueReader. This can cause the Read instance to read uninitialized...

`Read` on uninitialized buffer may cause UB (`impl Walue for Vec<u8>`)

Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation. Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect number of bytes written to the buffer. Reading from uninitialized memory...

RUSTSEC-2021-0016 `IoReader::read()`: user-provided `Read` on uninitialized buffer may cause UB

Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation. Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect number of bytes written to the buffer. Reading from uninitialized memory...

Record::read : Custom `Read` on uninitialized buffer may cause UB

Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation. Record::read Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect number of bytes written to the buffer. Reading from uninitialized...

Deserialization functions pass uninitialized memory to user-provided Read

Affected versions of this crate passed an uninitialized buffer to a user-provided Read instance in: deserializebinary deserializestring deserializeextensionothers deserializestringprimitive This can result in safe Read implementations reading from the uninitialized buffer leading to undefined...

`IoReader::read()`: user-provided `Read` on uninitialized buffer may cause UB

Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation. Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect number of bytes written to the buffer. Reading from uninitialized memory...

RUSTSEC-2021-0014 Record::read : Custom `Read` on uninitialized buffer may cause UB

Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation. Record::read Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect number of bytes written to the buffer. Reading from uninitialized...

RUSTSEC-2021-0092 Deserialization functions pass uninitialized memory to user-provided Read

Affected versions of this crate passed an uninitialized buffer to a user-provided Read instance in: deserializebinary deserializestring deserializeextensionothers deserializestringprimitive This can result in safe Read implementations reading from the uninitialized buffer leading to undefined...

PT-2021-24266

Name of the Vulnerable Software and Affected Versions: messagepack-rs crate through 2021-01-26 Description: The issue in the messagepack-rs crate allows functions such as deserialize binary, deserialize string, deserialize extension others, and deserialize string primitive to read from...

PT-2021-24267

Name of the Vulnerable Software and Affected Versions: messagepack-rs crate through 2021-01-26 Description: The issue in the messagepack-rs crate allows functions such as deserialize binary, deserialize string, deserialize extension others, and deserialize string primitive to read from...

PT-2021-24265

Name of the Vulnerable Software and Affected Versions: messagepack-rs crate through 2021-01-26 Description: An issue was discovered in the messagepack-rs crate where certain functions may read from uninitialized memory locations, leading to undefined behavior. The affected functions include...

PT-2021-24264

Name of the Vulnerable Software and Affected Versions: messagepack-rs crate through 2021-01-26 Description: An issue in the messagepack-rs crate allows it to read from uninitialized memory locations during deserialization. This affects functions such as deserialize binary, deserialize string,...

PT-2021-17193

Name of the Vulnerable Software and Affected Versions: ms3d crate versions prior to 0.1.3 Description: The issue allows attackers to obtain sensitive information from uninitialized memory locations via IoReader::read. Affected versions of the crate pass an uninitialized buffer to a user-provided...

PT-2021-16995

Name of the Vulnerable Software and Affected Versions marc crate versions prior to 2.0.0 Description An issue was discovered in the marc crate for Rust, where a user-provided Read implementation can gain access to the old contents of newly allocated memory, violating soundness. The affected...

CVE-2020-36219: Undefined Security Weakness

An issue was discovered in the atomic-option crate through 2020-10-31 for Rust. Because AtomicOption implements Sync unconditionally, a data race can occur...

RUSTSEC-2021-0089 Optional `Deserialize` implementations lacking validation

When activating the non-default feature serialize, most structs implement serde::Deserialize without sufficient validation. This allows breaking invariants in safe code, leading to: Undefined behavior in asstring methods which use std::str::fromutf8unchecked internally. Panics due to failed...