Affected versions of this crate called mem::uninitialized() to create values of a user-supplied type T. This is unsound e.g. if T is a reference type (which must be non-null and thus may not remain uninitialized). The flaw was corrected by avoiding the use of mem::uninitialized(), using MaybeUninit instead.
{ "nvd_published_at": "2021-12-27T00:15:00Z", "cwe_ids": [ "CWE-908" ], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-01-06T18:40:05Z" }