Fluid Attacks Database

Description

Use of Uninitialized Resource in ash. An issue was discovered in the ash crate before 0.33.1 for Rust. util::read_spv may read from uninitialized memory locations.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
cargo	ash	>=0 <0.33.1	0.33.1

Aliases

1. CVE-2021-456882. NVD-2021-456883. OSV-2021-456884. GCVE-2021-45688

References

1. https://github.com/MaikKlein/ash/issues/3542. https://github.com/ash-rs/ash/issues/3543. https://github.com/ash-rs/ash/pull/4704. https://github.com/ash-rs/ash/commit/2c98b6f384a017de031698bd623551a45f24c8f95. https://github.com/ash-rs/ash/compare/0.33.0...0.33.16. https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/ash/RUSTSEC-2021-0090.md7. https://rustsec.org/advisories/RUSTSEC-2021-0090.html