critical9.8
CVE-2021-45692
Use of Uninitialized Resource in messagepack-rs.
Impact
An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserialize_extension_others may read from uninitialized memory locations.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| rust | messagepack-rs | <= 0.8.1 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Messagepack-Rs Project | Messagepack-Rs | before 0.8.1 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/messagepack-rs/RUSTSEC-2021-0092.md
- https://rustsec.org/advisories/RUSTSEC-2021-0092.html
- https://github.com/advisories/GHSA-hr52-f9vp-582c
- https://nvd.nist.gov/vuln/detail/CVE-2021-45692
- https://github.com/otake84/messagepack-rs/issues/2