wasmer:deterministic: Heap-buffer-overflow in wasmer_types::serialize::_::_$LT$impl$u20$rkyv..Serialize$LT$__S$GT$$u20$for$u20

Project: https://github.com/wasmerio/wasmer.git Detailed Report: https://oss-fuzz.com/testcase?key=5042720751353856 Project: wasmer Fuzzing Engine: libFuzzer Fuzz Target: deterministic Job Type: libfuzzerasanwasmer Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

Archives may contain uninitialized memory

rkyv is a serialization framework that writes struct-compatible memory to be stored or transmitted. During serialization, struct padding bytes and unused enum bytes may not be initialized. These bytes may be written to disk or sent over unsecured channels...