~ / search / GHSA-jwfh-j623-m97h

GHSA-jwfh-j623-m97h

Use of Uninitialized Resource in messagepack-rs

Source: GitHub Advisory Database (reviewed) Critical CVE-2021-45691

Packages

EcosystemPackageAffectedFixed in
crates.io messagepack-rs <= 0.8.1 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserialize_string may read from uninitialized memory locations.

References

External links from the advisory. They lead to third-party sites.