Description
An issue was discovered in the claxon crate before 0.4.1 for Rust. Uninitialized memory can be exposed because certain decode buffer sizes are mishandled.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | claxon | >= 0.4.0, < 0.4.1 | 0.4.1 | GHSA-8c6g-4xc5-w96c |
| crates.io | claxon | < 0.3.2 | 0.3.2 | GHSA-8c6g-4xc5-w96c |
| crates.io | claxon | >= 0.0.0-0, < 0.3.2 · >= 0.4.0-0, < 0.4.1 | 0.3.2, 0.4.1 | RUSTSEC-2018-0004 |