CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2021-28036
High (7.5) in quinn project quinn. EPSS 1.2% chance of exploitation in the next 30 days. Fixed in quinn 0.5.4, 0.6.2, 0.7.0.
An issue was discovered in the quinn crate before 0.7.0 for Rust. It may have invalid memory access for certain versions of the standard library because it relies on a direct cast of std::net::SocketAddrV4 and std::net::SocketAddrV6 data structures.
Severity
- EPSS
- 1.2% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
- CWE
- CWE-119
- Published
- Modified
- Record from
- the NVD, synced
Affected
- quinn_project:quinn
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-fhv4-fx3v-77w6 | crates.io | quinn | <0.5.4 | 0.5.4 |
| GHSA-fhv4-fx3v-77w6 | crates.io | quinn | >=0.6.0 <0.6.2 | 0.6.2 |
| RUSTSEC-2021-0035 | crates.io | quinn | >=0.0.0-0 <0.5.4 >=0.6.0-0 <0.6.2 >=0.7.0-0 <0.7.0 | 0.5.4, 0.6.2, 0.7.0 |