GHSA-w5cr-frph-hw7fHighCVSS 7.5
Use of uninitialized buffer in rkyv
🔗 CVE IDs covered (1)
📋 Description
An issue was discovered in the rkyv crate before 0.6.0 for Rust. When an archive is created via serialization, the archive content may contain uninitialized values of certain parts of a struct.
🎯 Affected products1
- rust/rkyv:< 0.6.0
🔗 References (6)
- https://nvd.nist.gov/vuln/detail/CVE-2021-31919
- https://github.com/djkoloski/rkyv/commit/9c65ae9c2c67dd949b5c3aba9b8eba6da802ab7e
- https://github.com/djkoloski/rkyv/commit/f141b560523a20557db6540576d153010bd18712
- https://rustsec.org/advisories/RUSTSEC-2021-0054.html
- https://github.com/djkoloski/rkyv/issues/113
- https://github.com/advisories/GHSA-w5cr-frph-hw7f