Skip to content
OpenAdvisories

Package · crates.io

mz-avro

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    GHSA-jwh2-vrr9-vcp2

    mz-avro's incorrect use of `set_len` allows for un-initialized memory

    Affected versions of this crate passes an uninitialized buffer to a user-provided `Read` implementation. Arbitrary `Read` implementations can read from the uninitialized buffer (memory exposure) and also can return incorrect number of bytes written to the buf…

    mz-avro crates.io