crates.io/cdr CVE-2021-26305: critical 9.8, EPSS 1.69%

Reading uninitialized memory can cause UB (`Deserializer::read_vec`)

Action: Upgrade cdr to 0.2.4 or later.

cargo update -p cdr --precise 0.2.4

Affected

Fixed versions

Sources

• osv: RUSTSEC-2021-0012
• https://crates.io/crates/cdr
• https://rustsec.org/advisories/RUSTSEC-2021-0012.html
• https://github.com/hrektts/cdr-rs/issues/10

CVE-2021-26305 · published 2021-01-02T12:00:00Z · modified 2023-11-08T04:05:20.783188Z · JSON