crates.io direct_ring_buffer vulnerabilities

Latest crates.io direct_ring_buffer CVEs

Newest publication first

1. GHSA-fp5x-7m4q-449f Direct Ring Buffer has uninitialized memory exposure in create_ring_buffer

   Published 2025-10-21

   Low·CVSS 2.0

   The safe function create_ring_buffer allocates a buffer using Vec::with_capacity followed by set_len, creating a Box<[T]> containing uninitialized memory. This leads to undefined behavior when functions like write_slices create typed slices (e.g., &mut [bool]) over the uninitiali...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.