GitHub Advisoryadvisory · crates.io

GHSA-xm9m-2vj8-fmfr Uninitialized memory access in toodee

HIGH Published 2021-09-01 Modified 2021-08-30 Official page ↗
Aliases
CVE-2021-28029
Ecosystem
crates.io
Packages
toodee
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-908
Reviewed
2021-08-30

Affected packages

• crates.io toodee: < 0.3.0 → fixed in 0.3.0

Description

An issue was discovered in the toodee crate before 0.3.0 for Rust. The row-insertion feature allows attackers to read the contents of uninitialized memory locations.

Related

Alias · CVE (1)

  • CVE-2021-28029 An issue was discovered in the toodee crate before 0.3.0 for Rust. vulnerability

Weakness · CWE (1)

  • CWE-908 Use of Uninitialized Resource weakness

References