PT-2023-36100 · Unknown · Simd-Json-Derive
Published
2023-10-14
·
Updated
2023-10-14
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
simd-json-derive versions prior to 0.12.0
Description
The issue arises from an invalid use of
MaybeUninit::uninit().assume init() in the derive macro of simd-json-derive, leading to undefined behavior. This misuse can cause invalid memory access and result in panics in binaries compiled in release mode.Recommendations
For versions prior to 0.12.0, update to version 0.12.0 or later to resolve the issue, as it removes the problematic code section and avoids the use of MaybeUninit altogether.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Simd-Json-Derive