High · 7.5 CVE-2020-36511 EUVD-2022-0694GHSA-72r2-rg28-47v9GHSA-v2ch-fc8f-qm33RUSTSEC-2020-0153

`read` on uninitialized buffer may cause UB (bite::read::BiteReadExpandedExt::read_framed_max)

Published Dec 26, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

An issue was discovered in the bite crate through 2020-12-31 for Rust. read::BiteReadExpandedExt::read_framed_max may read from uninitialized memory locations.

Affected packages

Ecosystem	Package	Affected	Fixed	Record
crates.io	bite	<= 0.0.5	—	GHSA-72r2-rg28-47v9
crates.io	bite	>= 0.0.0-0	—	RUSTSEC-2020-0153

References

https://rustsec.org/advisories/RUSTSEC-2020-0153.html
https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/bite/RUSTSEC-2020-0153.md