EUVD-2022-0581

Malicious code in bioql PyPI...

LemoGUI (=0.0.1-nightly), aravis-utils (=0.7.0) +52 more potentially affected by CVE-2021-45689 via gfx-auxil (=0.10.0)

gfx-auxil CARGO version =0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on gfx-auxil and may be impacted: - LemoGUI =0.0.1-nightly - aravis-utils =0.7.0 - autograph =0.1.0, =0.1.2, =0.1.0, =0.5.0, =1.12.0, =0.19.0, =0.12.0, =0.5.1, =0.5.0, =0.5.2 ...

GHSA-FF2R-XPWQ-6WHJ Use of Uninitialized Resource in gfx-auxil

Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation. Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect number of bytes written to the buffer. Reading from uninitialized memory...

LemoGUI (=0.0.1-nightly), aravis-utils (=0.7.0) +52 more potentially affected by CVE-2021-45689 via gfx-auxil (=0.10.0)

gfx-auxil CARGO version =0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on gfx-auxil and may be impacted: - LemoGUI =0.0.1-nightly - aravis-utils =0.7.0 - autograph =0.1.0, =0.1.2, =0.1.0, =0.5.0, =1.12.0, =0.19.0, =0.12.0, =0.5.1, =0.5.0, =0.5.2 ...

CVE-2021-45689

An issue was discovered in the gfx-auxil crate through 2021-01-07 for Rust. gfxauxil::readspirv may read from uninitialized memory locations...

CVE-2021-45689

An issue was discovered in the gfx-auxil crate through 2021-01-07 for Rust. gfxauxil::readspirv may read from uninitialized memory locations...

CVE-2021-45689

CVE-2021-45689 affects the Rust crate gfx-auxil . The function gfx_auxil::read_spirv may read from uninitialized memory, per the NVD entry (through 2021-01-07). Root cause is reading uninitialized memory in the read_spirv path. Impact is memory safety issues (undefined behavior) with potential pa...

CVE-2021-45689

An issue was discovered in the gfx-auxil crate through 2021-01-07 for Rust. gfxauxil::readspirv may read from uninitialized memory locations...

LemoGUI (=0.0.1-nightly), a2d (>=0.1.0 <=0.1.11) +199 more potentially affected by CVE-2021-45689 via gfx-auxil (>=0.10.0 <=0.9.0)

gfx-auxil CARGO version =0.10.0, =0.1.0, =0.1.0, =0.0.1, =0.1.2, =0.1.0, =0.1.0, =0.5.4, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.1 and more Source cves: CVE-2021-45689 Source advisory: OSV:RUSTSEC-2021-0091...