Lucene search
+L

2 matches found

RustSec
RustSec
added 2021/03/01 12:00 p.m.31 views

Deserializing an array can drop uninitialized memory on panic

The readbytesdefaultle function for T; n arrays, used to deserialize arrays of T from bytes created a T; n array with std::mem::uninitialized and then called T's deserialization method. If T's deserialization method panicked, the uninitialized memory could drop invalid objects. This flaw was...

9.8CVSS2.7AI score0.01167EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder