https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T19:46:57.817547+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-218393 EUVD-2026-218393 2026-10-23T19:46:57.910631+00:00 EUVD-2026-218393 https://cve.radiocsirt.org/vuln/fkie_cve-2023-28448 fkie_cve-2023-28448 2026-10-23T19:46:57.910668+00:00

Versionize is a framework for version tolerant serializion/deserialization of Rust data structures, designed for usecases that need fast deserialization times and minimal size overhead. An issue was discovered in the ‘Versionize::deserialize’ implementation provided by the ‘versionize’ crate for ‘vmm_sys_utils::fam::FamStructWrapper', which can lead to out of bounds memory accesses. The impact started with version 0.1.1. The issue was corrected in version 0.1.10 by inserting a check that verifies, for any deserialized header, the lengths of compared flexible arrays are equal and aborting deserialization otherwise.

 https://cve.radiocsirt.org/vuln/ghsa-8vxc-r5wp-vgvc GHSA-8vxc-r5wp-vgvc — Versionize::deserialize implementation for FamStructWrapper<T> is lacking bound checks, potentially leading to out of b… 2026-10-23T19:46:57.910709+00:00

Affected: crates.io: versionize

### Impact

An issue was discovered in the `Versionize::deserialize` implementation provided by the `versionize` crate for `vmm_sys_util::fam::FamStructWrapper`, which can lead to out of bounds memory accesses.

### Patches

The impact started with version 0.1.1. The issue was corrected in version 0.1.10 by inserting a check that verifies, for any deserialized header, the lengths of compared flexible arrays are equal and aborting deserialization otherwise.

### Workarounds \-

### References - https://github.com/firecracker-microvm/versionize/pull/53

 https://cve.radiocsirt.org/vuln/gsd-2023-28448 gsd-2023-28448 2026-10-23T19:46:57.910741+00:00 gsd-2023-28448 https://cve.radiocsirt.org/vuln/msrc_cve-2023-28448 msrc_CVE-2023-28448 — Versionize is lacking bound checks potentially leading to out of bounds memory access 2026-10-23T19:46:57.910754+00:00 msrc_CVE-2023-28448 https://cve.radiocsirt.org/vuln/rustsec-2023-0030 RUSTSEC-2023-0030 — `Versionize::deserialize` implementation for `FamStructWrapper<T>` is lacking bound checks, potentially leading to out… 2026-10-23T19:46:57.910770+00:00

Affected: crates.io: versionize

An issue was discovered in the `Versionize::deserialize` implementation provided by the `versionize` crate for `vmm_sys_util::fam::FamStructWrapper`, which can lead to out of bounds memory accesses. The impact started with version 0.1.1. The issue was corrected in version 0.1.10 by inserting a check that verifies, for any deserialized header, the lengths of compared flexible arrays are equal and aborting deserialization otherwise.