Reported

December 31, 2020

Issued

August 21, 2021 (last modified: June 13, 2023)

Package

bite (crates.io)

Type

INFO Unsound

Categories

• memory-exposure

Aliases

• CVE-2020-36511
• GHSA-72r2-rg28-47v9
• GHSA-v2ch-fc8f-qm33

References

• https://github.com/hinaria/bite/issues/1

Patched

no patched versions

Description

Affected versions of this crate calls a user provided Read implementation on an uninitialized buffer.

Read on uninitialized buffer is defined as undefined behavior in Rust.

Advisory available under CC0-1.0 license.