CVE-2021-31919

Published: Apr 30, 2021Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

An issue was discovered in the rkyv crate before 0.6.0 for Rust. When an archive is created via serialization, the archive content may contain uninitialized values of certain parts of a struct.

Affected (1)

Products: Rkyv Project: Rkyv

Rkyv Project

1 product

Rkyv

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Rkyv Project Rkyv	Before 0.6.0

Related CWEs

CWE-909

Missing Initialization of Resource

The product does not initialize a critical resource.

References (2)

https://rustsec.org/advisories/RUSTSEC-2021-0054.html

Source: cve@mitre.org

Third Party Advisory

https://rustsec.org/advisories/RUSTSEC-2021-0054.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.