Lucene search
+L

4325 matches found

Github Security Blog
Github Security Blog
added 2021/08/25 8:54 p.m.41 views

Out of bounds read in uu_od

An issue was discovered in PartialReader in the uuod crate before 0.0.4 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation...

7.5CVSS4.3AI score0.009EPSS
SaveExploits1References10Affected Software1
Github Security Blog
Github Security Blog
added 2021/08/25 8:54 p.m.41 views

Free of uninitialized memory in telemetry

An issue was discovered in the telemetry crate through 0.1.2 for Rust. There is a drop of uninitialized memory if a value.clone call panics within misc::vecwithsize...

9.8CVSS2.4AI score0.01363EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2021/08/25 8:54 p.m.38 views

GHSA-RG4M-GWW5-7P47 Free of uninitialized memory in adtensor

An issue was discovered in the adtensor crate through 0.0.3 for Rust. There is a drop of uninitialized memory via the FromIterator implementation for Vector and Matrix...

9.8CVSS9.4AI score0.01326EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2021/08/25 8:54 p.m.29 views

Free of uninitialized memory in adtensor

An issue was discovered in the adtensor crate through 0.0.3 for Rust. There is a drop of uninitialized memory via the FromIterator implementation for Vector and Matrix...

9.8CVSS3.4AI score0.01326EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2021/08/25 8:53 p.m.11 views

GHSA-PPQP-78XX-3R38 Out of bounds write in calamine

An issue was discovered in the calamine crate before 0.17.0 for Rust. It allows attackers to overwrite heap-memory locations because Vec::setlen is used without proper memory claiming, and this uninitialized memory is used for a user-provided Read operation, as demonstrated by Sectors::get...

9.8CVSS9.3AI score0.01728EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2021/08/25 8:53 p.m.29 views

Out of bounds write in calamine

An issue was discovered in the calamine crate before 0.17.0 for Rust. It allows attackers to overwrite heap-memory locations because Vec::setlen is used without proper memory claiming, and this uninitialized memory is used for a user-provided Read operation, as demonstrated by Sectors::get...

9.8CVSS4.6AI score0.01728EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2021/08/25 8:53 p.m.19 views

GHSA-37JJ-WP7G-7WJ4 Read of uninitialized memory in cdr

An issue was discovered in Deserializer::readvec in the cdr crate before 0.2.4 for Rust. A user-provided Read implementation can gain access to the old contents of newly allocated heap memory, violating soundness...

9.8CVSS9.5AI score0.01688EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
added 2021/08/25 8:53 p.m.34 views

Read of uninitialized memory in cdr

An issue was discovered in Deserializer::readvec in the cdr crate before 0.2.4 for Rust. A user-provided Read implementation can gain access to the old contents of newly allocated heap memory, violating soundness...

9.8CVSS2.1AI score0.01688EPSS
SaveExploits1References6Affected Software1
Github Security Blog
Github Security Blog
added 2021/08/25 8:52 p.m.34 views

Out of bounds read in bra

Buffered Random Access BRA provides easy random memory access to a sequential source of data in Rust. This is achieved by greedily retaining all memory read from a given source. Buffered Random Access BRA provides easy random memory access to a sequential source of data in Rust. An issue was...

9.1CVSS3.3AI score0.01642EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2021/08/25 8:52 p.m.58 views

GHSA-8FGG-5V78-6G76 Deserializing an array can free uninitialized memory in byte_struct

Bytestruct stack and unpack structure as raw bytes with packed or bit field layout. An issue was discovered in the bytestruct crate before 0.6.1 for Rust. There can be a drop of uninitialized memory if a certain deserialization method panics...

9.8CVSS9.5AI score0.01167EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2021/08/25 8:51 p.m.36 views

Use of Uninitialized Resource in truetype

An issue was discovered in the truetype crate before 0.30.1 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation within Tape::takebytes...

7.5CVSS3.8AI score0.01059EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2021/08/25 8:50 p.m.16 views

GHSA-CGMG-2V6M-FJG7 Free of uninitialized memory in autorand

An issue was discovered in the autorand crate before 0.2.3 for Rust. Because of impl Random on arrays, uninitialized memory can be dropped when a panic occurs, leading to memory corruption...

7.8CVSS7.4AI score0.00426EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2021/08/25 8:50 p.m.32 views

Free of uninitialized memory in autorand

An issue was discovered in the autorand crate before 0.2.3 for Rust. Because of impl Random on arrays, uninitialized memory can be dropped when a panic occurs, leading to memory corruption...

7.8CVSS7.3AI score0.00426EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2021/08/25 8:49 p.m.44 views

GHSA-C7FW-CR3W-WVFC Multiple security issues including data race, buffer overflow, and uninitialized memory drop in arr

arr crate contains multiple security issues. Specifically, 1. It incorrectly implements Sync/Send bounds, which allows to smuggle non-Sync/Send types across the thread boundary. 2. Index and IndexMut implementation does not check the array bound. 3. Array::newfromtemplate drops uninitialized memo...

4.7CVSS6.7AI score0.01515EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2021/08/25 8:49 p.m.28 views

Multiple security issues including data race, buffer overflow, and uninitialized memory drop in arr

arr crate contains multiple security issues. Specifically, 1. It incorrectly implements Sync/Send bounds, which allows to smuggle non-Sync/Send types across the thread boundary. 2. Index and IndexMut implementation does not check the array bound. 3. Array::newfromtemplate drops uninitialized memo...

4.7CVSS6.1AI score0.00192EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2021/08/25 8:48 p.m.49 views

GHSA-FHVJ-7F9P-W788 Multiple security issues including data race, buffer overflow, and uninitialized memory drop in arr

arr crate contains multiple security issues. Specifically, 1. It incorrectly implements Sync/Send bounds, which allows to smuggle non-Sync/Send types across the thread boundary. 2. Index and IndexMut implementation does not check the array bound. 3. Array::newfromtemplate drops uninitialized memo...

9.8CVSS6.7AI score0.01515EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2021/08/25 8:48 p.m.28 views

Multiple security issues including data race, buffer overflow, and uninitialized memory drop in arr

arr crate contains multiple security issues. Specifically, 1. It incorrectly implements Sync/Send bounds, which allows to smuggle non-Sync/Send types across the thread boundary. 2. Index and IndexMut implementation does not check the array bound. 3. Array::newfromtemplate drops uninitialized memo...

9.8CVSS9AI score0.01476EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2021/08/25 8:48 p.m.96 views

GHSA-36XW-HGFV-JWM7 Multiple security issues including data race, buffer overflow, and uninitialized memory drop in arr

arr crate contains multiple security issues. Specifically, 1. It incorrectly implements Sync/Send bounds, which allows to smuggle non-Sync/Send types across the thread boundary. 2. Index and IndexMut implementation does not check the array bound. 3. Array::newfromtemplate drops uninitialized memo...

9.8CVSS6.7AI score0.01515EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2021/08/25 8:48 p.m.29 views

Multiple security issues including data race, buffer overflow, and uninitialized memory drop in arr

arr crate contains multiple security issues. Specifically, 1. It incorrectly implements Sync/Send bounds, which allows to smuggle non-Sync/Send types across the thread boundary. 2. Index and IndexMut implementation does not check the array bound. 3. Array::newfromtemplate drops uninitialized memo...

9.8CVSS9AI score0.01515EPSS
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2021/08/25 8:48 p.m.32 views

Off-by-one error in simple-slab

An issue was discovered in the simple-slab crate before 0.3.3 for Rust. remove has an off-by-one error, causing memory leakage and a drop of uninitialized memory...

7.5CVSS7.7AI score0.01336EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder