crates.io bite vulnerabilities

Latest crates.io bite CVEs

Newest publication first

1. GHSA-72r2-rg28-47v9 `read` on uninitialized buffer may cause UB (bite::read::BiteReadExpandedExt::read_framed_max)

   Published 2022-06-16

   Unknown

   Affected versions of this crate calls a user provided Read implementation on an uninitialized buffer. Read on uninitialized buffer is defined as undefined behavior in Rust.

2. CVE-2020-36511 Use of Uninitialized Resource in bite.

   Published 2021-12-26

   High·CVSS 7.5 EPSS 1.1%

   An issue was discovered in the bite crate through 2020-12-31 for Rust. read::BiteReadExpandedExt::read_framed_max may read from uninitialized memory locations.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.