GHSA-cvmj-47v9-35m9
FUSE-Rust: Uninitalized memory read and leak caused by fuser crate
During the creation of a new libfuse session with fuse_session_new, the operation list was passed as NULL incorrectly. libfuse expects this argument to always point to list of operations. This caused uninitialized memory read and leaks in libfuse.so.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
What each source reports
GitHub Advisories Score used
FUSE-Rust: Uninitalized memory read and leak caused by fuser crate
During the creation of a new libfuse session with fuse_session_new, the operation list was passed as NULL incorrectly. libfuse expects this argument to always point to list of operations. This caused uninitialized memory read and leaks in libfuse.so.
- Record
GHSA-cvmj-47v9-35m9- CVSS 4.0
- 8.2 High
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N - Weakness
- CWE-908
- Updated
- 2026-11-02
OSV
FUSE-Rust: Uninitalized memory read and leak caused by fuser crate
During the creation of a new libfuse session with fuse_session_new, the operation list was passed as NULL incorrectly. libfuse expects this argument to always point to list of operations. This caused uninitialized memory read and leaks in libfuse.so.
- Record
GHSA-cvmj-47v9-35m9- CVSS 4.0
- 8.2 High
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N - Weakness
- CWE-908
- Updated
- 2026-11-02
OSVRUSTSEC-2021-0154No score
Uninitalized memory read & leak caused by fuser crate
During creation of new libfuse session with fuse_session_new operation list was passed as NULL incorrectly. libfuse expects this argument to always point to list of operations. This caused uninitialized memory read and leaks in libfuse.so
- Record
RUSTSEC-2021-0154- Updated
- 2026-11-02
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-cvmj-47v9-35m9 is a high vulnerability (CVSS 8.2) in fuser, published September 10, 2021. No source lists public exploit code. Fixed in fuser 0.16.0.