Critical · 9.8 CVE-2021-45706 EUVD-2022-0554GHSA-c5hx-w945-j4pqRUSTSEC-2021-0115

Memory flaw in zeroize_derive

Published Dec 26, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

An issue was discovered in the zeroize_derive crate before 1.1.1 for Rust. Dropped memory is not zeroed out for an enum.

Ecosystem	Package	Affected	Fixed	Record
crates.io	zeroize_derive	< 1.1.1	1.1.1	GHSA-c5hx-w945-j4pq
crates.io	zeroize_derive	>= 0.0.0-0, < 1.1.1	1.1.1	RUSTSEC-2021-0115