GHSA-mcrf-7hf9-f6q5
Unchecked vector pre-allocation
GHSA-mcrf-7hf9-f6q5 is a vulnerability with no CVSS score yet in rmpv, published November 21, 2017. No source lists public exploit code. Fixed in rmpv 0.4.2.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0.4.2rmpv +1 more
Description
Affected versions of this crate pre-allocate memory on deserializing raw buffers without checking whether there is sufficient data available. This allows an attacker to do denial-of-service attacks by sending small msgpack messages that allocate gigabytes of memory.
Affected packages
What each source reports
GitHub AdvisoriesNo score
Unchecked vector pre-allocation
Affected versions of this crate pre-allocate memory on deserializing raw buffers without checking whether there is sufficient data available. This allows an attacker to do denial-of-service attacks by sending small msgpack messages that allocate gigabytes of memory.
- Record
GHSA-mcrf-7hf9-f6q5- Weakness
- CWE-400
- Updated
- 2026-11-02
OSVNo score
Unchecked vector pre-allocation
Affected versions of this crate pre-allocate memory on deserializing raw buffers without checking whether there is sufficient data available. This allows an attacker to do denial-of-service attacks by sending small msgpack messages that allocate gigabytes of memory.
- Record
GHSA-mcrf-7hf9-f6q5- Weakness
- CWE-400
- Updated
- 2026-11-02
OSVRUSTSEC-2017-0006No score
Unchecked vector pre-allocation
Affected versions of this crate pre-allocate memory on deserializing raw buffers without checking whether there is sufficient data available.
This allows an attacker to do denial-of-service attacks by sending small msgpack messages that allocate gigabytes of memory.
- Record
RUSTSEC-2017-0006- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.