https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T17:23:08.361511+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-04019 cnvd-2022-04019 2026-10-08T17:23:08.365055+00:00 cnvd-2022-04019 https://cve.radiocsirt.org/vuln/euvd-2026-33569 EUVD-2026-33569 2026-10-08T17:23:08.365088+00:00 EUVD-2026-33569 https://cve.radiocsirt.org/vuln/fkie_cve-2021-45687 fkie_cve-2021-45687 2026-10-08T17:23:08.365102+00:00

An issue was discovered in the raw-cpuid crate before 9.1.1 for Rust. If the serialize feature is used (which is not the the default), a Deserialize operation may lack sufficient validation, leading to memory corruption or a panic.

 https://cve.radiocsirt.org/vuln/ghsa-w428-f65r-h4q2 GHSA-w428-f65r-h4q2 — Deserialization of Untrusted Data in rust-cpuid 2026-10-08T17:23:08.365130+00:00

Affected: crates.io: raw-cpuid

An issue was discovered in the raw-cpuid crate before 9.1.1 for Rust. If the serialize feature is used (which is not the the default), a Deserialize operation may lack sufficient validation, leading to memory corruption or a panic.

 https://cve.radiocsirt.org/vuln/gsd-2021-45687 gsd-2021-45687 2026-10-08T17:23:08.365151+00:00 gsd-2021-45687 https://cve.radiocsirt.org/vuln/rustsec-2021-0089 RUSTSEC-2021-0089 — Optional `Deserialize` implementations lacking validation 2026-10-08T17:23:08.365162+00:00

Affected: crates.io: raw-cpuid

When activating the non-default feature `serialize`, most structs implement `serde::Deserialize` without sufficient validation. This allows breaking invariants in safe code, leading to:

* Undefined behavior in `as_string()` methods (which use `std::str::from_utf8_unchecked()` internally). * Panics due to failed assertions.

See https://github.com/gz/rust-cpuid/issues/43.