Files
advisory-db/crates/bite/RUSTSEC-2020-0153.md
2023-06-13 15:10:24 +02:00

20 lines
570 B
Markdown

```toml
[advisory]
id = "RUSTSEC-2020-0153"
package = "bite"
date = "2020-12-31"
url = "https://github.com/hinaria/bite/issues/1"
categories = ["memory-exposure"]
informational = "unsound"
aliases = ["CVE-2020-36511", "GHSA-72r2-rg28-47v9", "GHSA-v2ch-fc8f-qm33"]
[versions]
patched = []
```
# `read` on uninitialized buffer may cause UB (bite::read::BiteReadExpandedExt::read_framed_max)
Affected versions of this crate calls a user provided `Read` implementation on an uninitialized buffer.
`Read` on uninitialized buffer is defined as undefined behavior in Rust.