high7.5
CVE-2019-15553
Exposure of uninitialized memory in memoffset
Impact
Affected versions of this crate caused traps and/or memory unsafety by zero-initializing references. They also could lead to uninitialized memory being dropped if the field for which the offset is requested was behind a deref coercion, and that deref coercion caused a panic. The flaw was corrected by using MaybeUninit.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| rust | memoffset | < 0.5.0 | 0.5.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Memoffset Project | Memoffset | before 0.5.0 |