CVE-2021-28034

An issue was discovered in the stackdst crate before 0.6.1 for Rust. Because of the pushinner behavior, a double free can occur upon a val.clone panic...

CVE-2021-28027

The CVE-2021-28027 issue affects the bam crate for Rust prior to version 0.1.3, where loading a bgzip block can trigger an integer underflow and an out-of-bounds write in the internal buffer. This is caused by how block_size and related constants are used to set the buffer length, allowing memory...

CVE-2021-28027

An issue was discovered in the bam crate before 0.1.3 for Rust. There is an integer underflow and out-of-bounds write during the loading of a bgzip block...

CVE-2021-28028

An issue was discovered in the toodee crate before 0.3.0 for Rust. Row insertion can cause a double free upon an iterator panic...

CVE-2021-28028

The CVE-2021-28028 issue affects the Rust crate toodee prior to 0.3.0. The vulnerability arises during row insertion where an iterator panic can lead to a double free . Multiple connected sources (Red Hat CVE, OSVGHSA entries, CNVD, NVD, and CNVD) corroborate the description: a panic during itera...

CVE-2021-28030

An issue was discovered in the truetype crate before 0.30.1 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation within Tape::takebytes...

CVE-2021-28030

CVE-2021-28030 affects the Rust truetype crate prior to 0.30.1. The issue arises from a user-provided Read operation in Tape::take_bytes that can read contents from uninitialized memory. Impact is information disclosure of uninitialized memory. A fix was implemented by removing the unsafe usage a...

CVE-2021-28031

An issue was discovered in the scratchpad crate before 1.3.1 for Rust. The moveelements function can have a double-free upon a panic in a user-provided f function...

CVE-2021-28032

An issue was discovered in the nanoarena crate before 0.5.2 for Rust. There is an aliasing violation in splitat because two mutable references can exist for the same element, if Borrow behaves in certain ways. This can have a resultant out-of-bounds write or use-after-free...

CVE-2021-28032

The CVE concerns the Rust crate nano_arena before 0.5.2. A flaw in the split_at logic allows two mutable references to the same element when Borrow behaves in certain ways, creating a potential for memory safety issues such as an out-of-bounds write or use-after-free. The issue is rooted in alias...

CVE-2021-28035

An issue was discovered in the stackdst crate before 0.6.1 for Rust. Because of the pushinner behavior, a drop of uninitialized memory can occur upon a val.clone panic...

CVE-2021-28035

CVE-2021-28035 affects the Rust crate stack_dst, prior to 0.6.1. The root cause is the push_inner behavior, which can cause a drop of uninitialized memory if a val.clone() panics. The issue has been fixed in a later commit (and by upgrading to 0.6.1+). If exploited, this can lead to memory safety...

CVE-2021-28036

The CVE-2021-28036 issue affects the Rust quinn crate prior to version 0.7.0. It relies on a direct cast of std::net::SocketAddrV4 and std::net::SocketAddrV6 data structures, which can lead to invalid memory access if memory layout assumptions differ from the system sockaddr layout. The available...

CVE-2021-28036

An issue was discovered in the quinn crate before 0.7.0 for Rust. It may have invalid memory access for certain versions of the standard library because it relies on a direct cast of std::net::SocketAddrV4 and std::net::SocketAddrV6 data structures...

CVE-2021-28037

The CVE-2021-28037 issue affects the Rust internment crate prior to 0.4.2. It arises from an unconditional impl of Sync for Intern, enabling a data race that can cause memory corruption. Documented impacts are memory contention and potential corruption. The vulnerability is mitigated by upgrading...

CVE-2021-28037

An issue was discovered in the internment crate before 0.4.2 for Rust. There is a data race that can cause memory corruption because of the unconditional implementation of Sync for Intern...

CVE-2021-28033

The CVE-2021-28033 issue concerns the byte_struct crate for Rust pre-0.6.1, where deserializing via a certain method could cause a drop of uninitialized memory when panicking. Affected component: byte_struct (Rust) before 0.6.1. Impact described as potential memory safety failure during deseriali...

CVE-2021-28033

An issue was discovered in the bytestruct crate before 0.6.1 for Rust. There can be a drop of uninitialized memory if a certain deserialization method panics...

CVE-2021-28029

An issue was discovered in the toodee crate before 0.3.0 for Rust. The row-insertion feature allows attackers to read the contents of uninitialized memory locations...

Rust 缓冲区错误漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A buffer overflow vulnerability exists in bytestruct crate before 0.6.1 for Rust, which stems from a problem with the deserialization method that results in the loss of uninitialized memory. No details of the...