Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2021-28033: Uninitialized Memory Dropped When Deserialization Fails in Rust's byte_struct
CVE-2021-28033 · published 5 years ago
Summary
The byte_struct crate in certain versions of Rust may leak memory if deserialization fails, potentially leading to security risks. This issue affects developers using the byte_struct crate and can be mitigated by updating to version 0.6.1 or later. Update the crate to the latest version to ensure data integrity and security.
What to do
- Update wwylele byte_struct to version 0.6.1.
- Update byte_struct_project byte_struct to version 0.6.1 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| rust | wwylele | byte_struct |
< 0.6.1 Fix: upgrade to 0.6.1
|
| – | byte_struct_project | byte_struct |
< 0.6.1 cpe:2.3:a:byte_struct_project:byte_struct:*:*:*:*:*:rust:*:* |
Original advisory text
An issue was discovered in the byte_struct crate before 0.6.1 for Rust. There can be a drop of uninitialized memory if a certain deserialization method panics.
An issue was discovered in the byte_struct crate before 0.6.1 for Rust. There can be a drop of uninitialized memory if a certain deserialization method panics.
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Type
CWE-119Buffer Overflow
CWE-908Use of Uninitialized Resource
Timeline
Published5 Mar 2021
Updated4 Nov 2026
First seen6 Mar 2026
Track software like this
Free during beta