crates.io/byte_struct CVE-2021-28033: critical 9.8, EPSS 1.29%

Deserializing an array can free uninitialized memory in byte_struct

Action: Upgrade byte_struct to 0.6.1 or later.

cargo update -p byte_struct --precise 0.6.1

Affected

Fixed versions

Sources

• osv: GHSA-8fgg-5v78-6g76
• https://nvd.nist.gov/vuln/detail/CVE-2021-28033
• https://github.com/wwylele/byte-struct-rs/issues/1
• https://github.com/wwylele/byte-struct-rs/commit/a535678377de12bc6bc22620c5f59bcc1369f76f
• https://github.com/wwylele/byte-struct-rs
• https://rustsec.org/advisories/RUSTSEC-2021-0032.html

CVE-2021-28033 · published 2021-08-25T20:52:03Z · modified 2023-11-08T04:05:27.850049Z · JSON