GHSA-gvcp-948f-8f2pCriticalCVSS 9.8

Use of Uninitialized Resource in libp2p-deflate

Published
August 25, 2021
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

CVE-2020-36443 →

📋 Description

An issue was discovered in the libp2p-deflate crate before 0.27.1 for Rust. An uninitialized buffer is passed to AsyncRead::poll_read(), which is a user-provided trait function.

🎯 Affected products1

  • rust/libp2p-deflate:< 0.27.1

🔗 References (3)