Vulnerability Details CVE-2021-45703
An issue was discovered in the tectonic_xdv crate before 0.1.12 for Rust. XdvParser::<T>::process may read from uninitialized memory locations.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 62.0%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
- https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/tectonic_xdv/RUSTSEC-2021-0112.md
- https://rustsec.org/advisories/RUSTSEC-2021-0112.html
- https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/tectonic_xdv/RUSTSEC-2021-0112.md
- https://rustsec.org/advisories/RUSTSEC-2021-0112.html
Products affected by CVE-2021-45703
-
cpe:2.3:a:tectonic_xdv_project:tectonic_xdv:-
-
cpe:2.3:a:tectonic_xdv_project:tectonic_xdv:0.1.10
-
cpe:2.3:a:tectonic_xdv_project:tectonic_xdv:0.1.11
-
cpe:2.3:a:tectonic_xdv_project:tectonic_xdv:0.1.8
-
cpe:2.3:a:tectonic_xdv_project:tectonic_xdv:0.1.9