CVSS 3.1
9.1 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:HCVE-2021-25905
Critical (9.1) in bra project bra. EPSS 1.7% chance of exploitation in the next 30 days. Fixed in bra 0.1.1.
An issue was discovered in the bra crate before 0.1.1 for Rust. It lacks soundness because it can read uninitialized memory.
Severity
- EPSS
- 1.7% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
- CWE
- CWE-908
- Published
- Modified
- Record from
- the NVD, synced
Affected
- bra_project:bra
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-j8qq-58cr-8cc7 | crates.io | bra | <0.1.1 | 0.1.1 |
| RUSTSEC-2021-0008 | crates.io | bra | >=0.0.0-0 <0.1.1 | 0.1.1 |