a2d (>=0.1.0, <=0.1.11), acidalia (>=0.1.0, <=0.1.3) +279 more potentially affected by CVE-2021-45688 via ash (>=0.24.4, <=0.32.1)

ash CARGO version =0.24.4, =0.1.0, =0.1.0, =0.0.1, =0.1.2, =0.1.0, =0.5.4-rc.1, =0.2.0, =0.1.0, =0.1.3, =0.1.4 - aravis-utils 0.7.0 and more Source cves: CVE-2021-45688 Source advisory: OSV:GHSA-QJ69-C89V-JWQ2...

a2d (>=0.1.0, <=0.1.11), acidalia (>=0.1.0, <=0.1.3) +279 more potentially affected by CVE-2021-45688 via ash (>=0.24.4, <=0.32.1)

ash CARGO version =0.24.4, =0.1.0, =0.1.0, =0.0.1, =0.1.2, =0.1.0, =0.5.4-rc.1, =0.2.0, =0.1.0, =0.1.3, =0.1.4 - aravis-utils 0.7.0 and more Source cves: CVE-2021-45688 Source advisory: OSV:GHSA-64WV-8VWP-XGW2...

CVE-2021-45688

The CVE-2021-45688 issue affects the Rust ash crate prior to version 0.33.1. The root cause is util::read_spv reading from uninitialized memory locations, which can lead to memory exposure/undefined behavior. Several sources (e.g., OSV/GHSA and CNVD notes) confirm this vulnerability and reference...

a2d (>=0.1.0, <=0.1.11), acidalia (>=0.1.0, <=0.1.3) +279 more potentially affected by CVE-2021-45688 via ash (>=0.24.4, <=0.32.1)

ash CARGO version =0.24.4, =0.1.0, =0.1.0, =0.0.1, =0.1.2, =0.1.0, =0.5.4-rc.1, =0.2.0, =0.1.0, =0.1.3, =0.1.4 - aravis-utils 0.7.0 and more Source cves: CVE-2021-45688 Source advisory: OSV:RUSTSEC-2021-0090...