Tagged “rust”
CVEs tagged rust, newest first.
740 CVEsRSS
CVE-2022-39294High· 7.5Denial of Service from unchecked request length
Denial of Service from unchecked request length
CVE-2021-21235Medium· 6.5kamadak-exif vulnerable to Infinite loop when parsing PNG files
kamadak-exif vulnerable to Infinite loop when parsing PNG files
CVE-2022-36086High· 8.4Multiple vulnerabilities resulting in out-of-bounds writes
Multiple vulnerabilities resulting in out-of-bounds writes
CVE-2022-35922NoneUnbounded memory allocation based on untrusted length
Unbounded memory allocation based on untrusted length
CVE-2022-31173High· 7.5Denial of service on deeply nested fragment requests
Denial of service on deeply nested fragment requests
CVE-2022-31146NoneUse After Free with `externref`s in Wasmtime
Use After Free with `externref`s in Wasmtime
CVE-2022-23486High· 7.5libp2p Lack of resource management DoS
libp2p Lack of resource management DoS
CVE-2022-23636NonePoCMiscompilation of constant values in division on AArch64
Miscompilation of constant values in division on AArch64
CVE-2022-31104NoneMiscompilation of `i8x16.swizzle` and `select` with v128 inputs
Miscompilation of `i8x16.swizzle` and `select` with v128 inputs
CVE-2021-45707HighOut-of-bounds write in nix::unistd::getgrouplist
Out-of-bounds write in nix::unistd::getgrouplist
CVE-2020-36846Medium· 6.5Integer overflow in the bundled Brotli C library
Integer overflow in the bundled Brotli C library
CVE-2022-31100NonePanic due to improper UTF-8 indexing
Panic due to improper UTF-8 indexing
CVE-2022-31099NoneStack overflow during recursive expression parsing
Stack overflow during recursive expression parsing
CVE-2022-29185Medium· 4.2Timing attack
Timing attack
CVE-2022-24791NoneUse after free with `externref`s and epoch interruption in Wasmtime
Use after free with `externref`s and epoch interruption in Wasmtime
CVE-2022-23639NoneUnsoundness of AtomicCell<*64> arithmetics on 32-bit targets that support Atomic*64
Unsoundness of AtomicCell<*64> arithmetics on 32-bit targets that support Atomic*64
CVE-2021-43790High· 8.5Use After Free in lucet-runtime
Use After Free in lucet-runtime
CVE-2021-41149High· 8.2Improper sanitization of target names
Improper sanitization of target names
CVE-2021-41138Medium· 5.3Validity check missing in Frontier
Validity check missing in Frontier
RUSTSEC-2021-0158NoneXSS in ammonia via SVG `animateMotion`, `animateTransform`, and/or `animateColor` tags
XSS in ammonia via SVG `animateMotion`, `animateTransform`, and/or `animateColor` tags
RUSTSEC-2021-0157NoneIncorrect escaping for `url("")` functions in CSS style attributes
Incorrect escaping for `url("")` functions in CSS style attributes
CVE-2021-32619Critical· 9.8Deno's static imports inside dynamically imported modules do not adhere to permission checks
Deno's static imports inside dynamically imported modules do not adhere to permission checks
CVE-2021-39228Medium· 6.5Memory Safety Issue when using patch or merge on state and assign the result back to state
Memory Safety Issue when using patch or merge on state and assign the result back to state
CVE-2021-39216Medium· 6.3Out-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtime
Out-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtime
CVE-2021-39193Medium· 5.3Transaction validity oversight in pallet-ethereum
Transaction validity oversight in pallet-ethereum
CVE-2021-29937Critical· 9.8Free of uninitialized memory in telemetry
Free of uninitialized memory in telemetry
CVE-2020-15254High· 8.1crossbeam-channel Undefined Behavior before v0.4.4
crossbeam-channel Undefined Behavior before v0.4.4
CVE-2021-45697NonePartial read is incorrect in molecule
Partial read is incorrect in molecule
CVE-2021-32810Critical· 9.8Data race in crossbeam-deque
Data race in crossbeam-deque
CVE-2021-45700NoneProcess crashes when the cell used as DepGroup is not alive
Process crashes when the cell used as DepGroup is not alive