https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 21:57:08 +0000 https://cve.radiocsirt.org/vuln/cve-2021-29937 <p>An issue was discovered in the telemetry crate through 2021-02-17 for Rust. There is a drop of uninitialized memory if a value.clone() call panics within misc::vec_with_size().</p> <p>An issue was discovered in the telemetry crate through 2021-02-17 for Rust. There is a drop of uninitialized memory if a value.clone() call panics within misc::vec_with_size().</p> https://cve.radiocsirt.org/vuln/cve-2021-29937 https://cve.radiocsirt.org/vuln/rustsec-2021-0046 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> crates.io: telemetry</p> <p>`misc::vec_with_size` creates a vector of the provided `size` and immediately calls `vec.set_len(size)` on it, initially filling it with uninitialized memory. It then inserts elements using `vec[i] = value.clone()`.</p> <p>If the `value.clone()` call panics, uninitialized items in the vector will be dropped leading to undefined behavior.</p> <p>## Withdrawal</p> <p>This advisory has been withdrawn because the above unsoundness cannot be triggered in safe code by dependents of the crate, as the `Clone` generic of private function `misc::vec_with_size` only instantiates to primitive types in public functions, which is impossible to panic.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> crates.io: telemetry</p> <p>`misc::vec_with_size` creates a vector of the provided `size` and immediately calls `vec.set_len(size)` on it, initially filling it with uninitialized memory. It then inserts elements using `vec[i] = value.clone()`.</p> <p>If the `value.clone()` call panics, uninitialized items in the vector will be dropped leading to undefined behavior.</p> <p>## Withdrawal</p> <p>This advisory has been withdrawn because the above unsoundness cannot be triggered in safe code by dependents of the crate, as the `Clone` generic of private function `misc::vec_with_size` only instantiates to primitive types in public functions, which is impossible to panic.</p> https://cve.radiocsirt.org/vuln/rustsec-2021-0046