Critical · 9.8 CVE-2021-45690 CVE-2021-45691CVE-2021-45692CVE-2021-45693EUVD-2022-0709GHSA-hr52-f9vp-582cGHSA-jqjj-r4qp-x2ghGHSA-jwfh-j623-m97hGHSA-m325-rxjv-pwphGHSA-vw5m-qw2r-m923RUSTSEC-2021-0092

Use of Uninitialized Resource in messagepack-rs.

Published Dec 26, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Package: messagepack-rs Ecosystem: crates.io

Description

An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserialize_binary may read from uninitialized memory locations.

Affected packages

Ecosystem	Package	Affected	Fixed	Record
crates.io	messagepack-rs	<= 0.8.1	—	GHSA-hr52-f9vp-582c
crates.io	messagepack-rs	>= 0.0.0-0	—	RUSTSEC-2021-0092

References

https://rustsec.org/advisories/RUSTSEC-2021-0092.html
https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/messagepack-rs/RUSTSEC-2021-0092.md