Skip to content

`rmp-serde` `Raw` and `RawRef` may crash when receiving invalid UTF-8

Moderate severity GitHub Reviewed Published Mar 22, 2023 to the GitHub Advisory Database • Updated Mar 22, 2023

Package

cargo rmp-serde (Rust)

Affected versions

< 1.1.1

Patched versions

1.1.1

Description

It was found that Raw::from_utf8 expects valid UTF-8. If invalid UTF-8 is received it can cause the process to crash.

References

Published to the GitHub Advisory Database Mar 22, 2023
Reviewed Mar 22, 2023
Last updated Mar 22, 2023

Severity

Moderate

Weaknesses

No CWEs

CVE ID

No known CVE

GHSA ID

GHSA-255r-3prx-mf99

Source code

Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.