CVE-2021-31919

An issue was discovered in the rkyv crate before 0.6.0 for Rust. When an archive is created via serialization, the archive content may contain uninitialized values of certain parts of a struct...

rkyv_dyn (>=0.1.0 <=0.5.1), stackstring (=0.0.2) +12 more potentially affected by CVE-2021-31919 via rkyv (>=0.1.1 <=0.5.2)

rkyv CARGO version =0.1.1, =0.1.0, =0.1.1, =0.1.2, =0.1.0, =0.9.0, =0.9.0, =0.9.0, =0.8.0, =0.1.0, =0.9.0, =0.1.0, =0.1.0, =0.1.0, =0.1.5 Source cves: CVE-2021-31919 Source advisory: OSV:GHSA-W5CR-FRPH-HW7F...

CVE-2021-31919

The CVE-2021-31919 entry concerns the Rust rkyv crate before version 0.6.0. During serialization, an archive may contain uninitialized values for certain struct parts, potentially affecting the serialized data’s integrity and confidentiality. The core affected component is rkyv (Rust). Publicly d...

rkyv_dyn (>=0.1.0 <=0.5.1), stackstring (=0.0.2) +12 more potentially affected by CVE-2021-31919 via rkyv (>=0.1.1 <=0.5.2)

rkyv CARGO version =0.1.1, =0.1.0, =0.1.1, =0.1.2, =0.1.0, =0.9.0, =0.9.0, =0.9.0, =0.8.0, =0.1.0, =0.9.0, =0.1.0, =0.1.0, =0.1.0, =0.1.5 Source cves: CVE-2021-31919 Source advisory: OSV:RUSTSEC-2021-0054...