Most recent entries from all

cnvd-2021-29837

EUVD-2026-26576

fkie_cve-2021-29937

An issue was discovered in the telemetry crate through 2021-02-17 for Rust. There is a drop of uninitialized memory if a value.clone() call panics within misc::vec_with_size().

GHSA-hpcx-3pw8-g3j2 — Free of uninitialized memory in telemetry

Affected: crates.io: telemetry

An issue was discovered in the telemetry crate through 0.1.2 for Rust. There is a drop of uninitialized memory if a value.clone() call panics within misc::vec_with_size()

gsd-2021-29937

Withdrawn: RUSTSEC-2021-0046 — misc::vec_with_size() can drop uninitialized memory if clone panics

Withdrawn by the publisher.

Affected: crates.io: telemetry

`misc::vec_with_size` creates a vector of the provided `size` and immediately calls `vec.set_len(size)` on it, initially filling it with uninitialized memory. It then inserts elements using `vec[i] = value.clone()`.

If the `value.clone()` call panics, uninitialized items in the vector will be dropped leading to undefined behavior.

## Withdrawal

This advisory has been withdrawn because the above unsoundness cannot be triggered in safe code by dependents of the crate, as the `Clone` generic of private function `misc::vec_with_size` only instantiates to primitive types in public functions, which is impossible to panic.