Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-m325-rxjv-pwph: Deserialization functions pass uninitialized memory to user-provided Read

Affected versions of this crate passed an uninitialized buffer to a user-provided Read instance in:

  • deserialize_binary
  • deserialize_string
  • deserialize_extension_others
  • deserialize_string_primitive

This can result in safe Read implementations reading from the uninitialized buffer leading to undefined behavior.

ghsa
#git

Deserialization functions pass uninitialized memory to user-provided Read

High severity GitHub Reviewed Published Jun 17, 2022

ghsa: Latest News

GHSA-27wf-5967-98gx: Kubernetes kubelet arbitrary command execution