CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2021-31919
High (7.5) in rkyv project rkyv. EPSS 1.1% chance of exploitation in the next 30 days. Fixed in rkyv 0.6.0.
An issue was discovered in the rkyv crate before 0.6.0 for Rust. When an archive is created via serialization, the archive content may contain uninitialized values of certain parts of a struct.
Severity
- EPSS
- 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
- CWE
- CWE-909
- Published
- Modified
- Record from
- the NVD, synced
Affected
- rkyv_project:rkyv
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-w5cr-frph-hw7f | crates.io | rkyv | <0.6.0 | 0.6.0 |
| RUSTSEC-2021-0054 | crates.io | rkyv | >=0.0.0-0 <0.6.0 | 0.6.0 |