~ / search / GHSA-rh89-x75f-rh3c

GHSA-rh89-x75f-rh3c

Exposure of uninitialized memory in memoffset

Source: GitHub Advisory Database (reviewed) High CVE-2019-15553

Packages

EcosystemPackageAffectedFixed in
crates.io memoffset < 0.5.0 0.5.0

Details

As written in the advisory (Markdown source, shown as plain text).

Affected versions of this crate caused traps and/or memory unsafety by zero-initializing references. They also could lead to uninitialized memory being dropped if the field for which the offset is requested was behind a deref coercion, and that deref coercion caused a panic. The flaw was corrected by using MaybeUninit.

References

External links from the advisory. They lead to third-party sites.