CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2021-45687
Critical (9.8) in raw-cpuid project raw-cpuid. EPSS 1.2% chance of exploitation in the next 30 days. Fixed in raw-cpuid 9.1.1.
An issue was discovered in the raw-cpuid crate before 9.1.1 for Rust. If the serialize feature is used (which is not the the default), a Deserialize operation may lack sufficient validation, leading to memory corruption or a panic.
Severity
- EPSS
- 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- raw-cpuid_project:raw-cpuid
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-jf5h-cf95-w759 | crates.io | raw-cpuid | >=3.1.0 <9.1.1 | 9.1.1 |
| GHSA-w428-f65r-h4q2 | crates.io | raw-cpuid | >=3.1.0 <9.1.1 | 9.1.1 |
| RUSTSEC-2021-0089 | crates.io | raw-cpuid | >=3.1.1-0 <9.1.1 | 9.1.1 |