crates.io/raw-cpuid CVE-2021-45687: critical 9.8, EPSS 1.16%

Deserialization of Untrusted Data in rust-cpuid

Action: Upgrade raw-cpuid to 9.1.1 or later.

cargo update -p raw-cpuid --precise 9.1.1

Affected

Fixed versions

Sources

• osv: GHSA-w428-f65r-h4q2
• https://nvd.nist.gov/vuln/detail/CVE-2021-45687
• https://github.com/gz/rust-cpuid/issues/43
• https://github.com/gz/rust-cpuid
• https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/raw-cpuid/RUSTSEC-2021-0089.md
• https://rustsec.org/advisories/RUSTSEC-2021-0089.html

CVE-2021-45687 · published 2022-01-06T22:13:12Z · modified 2023-11-08T04:07:21.872047Z · JSON