~ / search / GHSA-jqjj-r4qp-x2gh

GHSA-jqjj-r4qp-x2gh

Use of Uninitialized Resource in messagepack-rs.

Source: GitHub Advisory Database (reviewed) Critical CVE-2021-45693

Packages

EcosystemPackageAffectedFixed in
crates.io messagepack-rs <= 0.8.1 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserialize_string_primitive may read from uninitialized memory locations.

References

External links from the advisory. They lead to third-party sites.