GHSA-255r-3prx-mf99
`rmp-serde` `Raw` and `RawRef` may crash when receiving invalid UTF-8
It was found that Raw::from_utf8 expects valid UTF-8. If invalid UTF-8 is received it can cause the process to crash.
What each source reports
GitHub Advisories No score
`rmp-serde` `Raw` and `RawRef` may crash when receiving invalid UTF-8
It was found that Raw::from_utf8 expects valid UTF-8. If invalid UTF-8 is received it can cause the process to crash.
- Record
GHSA-255r-3prx-mf99- Updated
- 2026-11-02
OSV No score
`rmp-serde` `Raw` and `RawRef` may crash when receiving invalid UTF-8
It was found that Raw::from_utf8 expects valid UTF-8. If invalid UTF-8 is received it can cause the process to crash.
- Record
GHSA-255r-3prx-mf99- Updated
- 2026-11-02
OSVRUSTSEC-2022-0092 No score
`rmp-serde` `Raw` and `RawRef` unsound
It was found that Raw::from_utf8 expects valid UTF-8. If invalid UTF-8 is received it can cause the process to crash.
- Record
RUSTSEC-2022-0092- Updated
- 2026-11-02
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-255r-3prx-mf99 is a vulnerability with no CVSS score yet in rmp-serde, published April 13, 2022. No source lists public exploit code. Fixed in rmp-serde 1.1.1.