critical9.8
CVE-2021-45683
Use of Uninitialized Resource in binjs_io.
Impact
An issue was discovered in the binjs_io crate through 2021-01-03 for Rust. The Read method may read from uninitialized memory locations.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| rust | binjs_io | <= 0.2.1 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Binjs Io Project | Binjs Io | Version 0.2.1 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/binjs_io/RUSTSEC-2021-0085.md
- https://rustsec.org/advisories/RUSTSEC-2021-0085.html
- https://github.com/advisories/GHSA-cw4j-cf6c-mmfv
- https://nvd.nist.gov/vuln/detail/CVE-2021-45683
- https://github.com/binast/binjs-ref/issues/460