GHSA-w428-f65r-h4q2
Suggest an improvement- Source
- https://github.com/advisories/GHSA-w428-f65r-h4q2
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/01/GHSA-w428-f65r-h4q2/GHSA-w428-f65r-h4q2.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-w428-f65r-h4q2
- Aliases
-
- CVE-2021-45687
- GHSA-jf5h-cf95-w759
- RUSTSEC-2021-0089
- Published
- 2022-01-06T22:13:12Z
- Modified
- 2023-11-08T04:07:21.872047Z
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- Deserialization of Untrusted Data in rust-cpuid
- Details
-
An issue was discovered in the raw-cpuid crate before 9.1.1 for Rust. If the serialize feature is used (which is not the the default), a Deserialize operation may lack sufficient validation, leading to memory corruption or a panic.
- References
Affected packages
crates.io / raw-cpuid
Package
- Name
- raw-cpuid
- View open source insights on deps.dev
- Purl
- pkg:cargo/raw-cpuid