CVE-2020-36513

An issue was discovered in the accreader crate through 2020-12-27 for Rust. readupto may read from uninitialized memory locations...

CVE-2020-36513

CVE-2020-36513 concerns the Rust crate acc_reader (up to 2020-12-27) where the read_up_to function may read from uninitialized memory locations. Multiple connected advisories (including GHSA entries and national/DNS variants) describe uninitialized buffers being exposed through Read implementatio...

CVE-2020-36514

An issue was discovered in the accreader crate through 2020-12-27 for Rust. fillbuf may read from uninitialized memory locations...

CVE-2020-36514

The CVE-2020-36514 issue affects the acc_reader crate for Rust (through 2020-12-27). The vulnerability is that fill_buf (and related read_up_to paths) may read from uninitialized memory, allowing potential memory exposure. Multiple connected advisories (OSV GHSA entries, Red Hat and CNVD entries,...

CVE-2021-45680

CVE-2021-45680 concerns the vec-const crate (Rust) prior to 2.0.0, where a vector is constructed from a pointer to a const slice, leading to memory corruption. Several sources (OSV/RUSTSEC and CVE records) confirm the affected component and the root cause. Impact is memory corruption; exact explo...

CVE-2021-45680

An issue was discovered in the vec-const crate before 2.0.0 for Rust. It tries to construct a Vec from a pointer to a const slice, leading to memory corruption...

CVE-2021-45681

An issue was discovered in the derive-com-impl crate before 0.1.2 for Rust. An invalid reference and memory corruption can occur because AddRef might not be called before returning a pointer...

CVE-2021-45681

CVE-2021-45681 affects the Rust crate derive-com-impl prior to 0.1.2. The issue is an invalid reference leading to memory corruption because AddRef may not be called before returning a pointer. Multiple sources (OSV/RUSTSEC/RUST) detail the same root cause and note the fix was committed (9803f31f...

CVE-2021-45682

An issue was discovered in the bronzedb-protocol crate through 2021-01-03 for Rust. ReadKVExt may read from uninitialized memory locations...

CVE-2021-45682

The CVE-2021-45682 entry concerns the bronzedb-protocol crate for Rust, for versions through 2021-01-03. The root issue is that ReadKVExt may read from uninitialized memory locations, which can lead to undefined behavior and potential memory exposure. Public-environment advisories (OSV, Red Hat, ...

CVE-2021-45683

An issue was discovered in the binjsio crate through 2021-01-03 for Rust. The Read method may read from uninitialized memory locations...

CVE-2021-45683

The CVE-2021-45683 issue affects the Rust crate binjs_io (pre-2021-01-03). The Read method may read from uninitialized memory locations, causing memory exposure and potential undefined behavior. Public advisories (e.g., RUSTSEC-2021-0085, GHSA-CW4J-CF6C-MMFV, GHSA-C6PX-4GRW-HRJR, OSV entries) des...

CVE-2021-45684

The CVE-2021-45684 issue affects the Rust crate flumedb, where read_entry may read from uninitialized memory locations. This can lead to memory exposure and undefined behavior in affected builds. The vulnerability is described consistently across sources (NVD, Red Hat, OSV/GHSA) as an uninitializ...

CVE-2021-45684

An issue was discovered in the flumedb crate through 2021-01-07 for Rust. readentry may read from uninitialized memory locations...

CVE-2021-45685

An issue was discovered in the columnar crate through 2021-01-07 for Rust. ColumnarReadExt::readtypedvec may read from uninitialized memory locations...

CVE-2021-45685

CVE-2021-45685 affects the Rust columnar crate (pre-2021-01-07) where ColumnarReadExt::read_typed_vec may read from uninitialized memory. This can cause memory exposure and undefined behavior when a crate passes an uninitialized buffer to a user-provided Read implementation. Multiple connected ad...

CVE-2021-45687

An issue was discovered in the raw-cpuid crate before 9.1.1 for Rust. If the serialize feature is used which is not the the default, a Deserialize operation may lack sufficient validation, leading to memory corruption or a panic...

CVE-2021-45687

The CVE-2021-45687 issue affects the Rust raw-cpuid crate prior to 9.1.1. When the non-default serialize feature is enabled, Deserialize may lack sufficient validation, causing memory corruption or a panic. Versions before 9.1.1 are vulnerable; upgrading to 9.1.1 or later is the supported remedia...

CVE-2021-45688

The CVE-2021-45688 issue affects the Rust ash crate prior to version 0.33.1. The root cause is util::read_spv reading from uninitialized memory locations, which can lead to memory exposure/undefined behavior. Several sources (e.g., OSV/GHSA and CNVD notes) confirm this vulnerability and reference...

CVE-2021-45689

CVE-2021-45689 affects the Rust crate gfx-auxil . The function gfx_auxil::read_spirv may read from uninitialized memory, per the NVD entry (through 2021-01-07). Root cause is reading uninitialized memory in the read_spirv path. Impact is memory safety issues (undefined behavior) with potential pa...