{"id":"CVE-2019-16144","aliases":["EUVD-2021-1596","GHSA-6c65-xcf5-299x","RUSTSEC-2019-0020"],"status":"published","title":"Uninitialized memory use in generator","description":"An issue was discovered in the generator crate before 0.6.18 for Rust. Uninitialized memory is used by Scope, done, and yield_ during API calls.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01635,"percentile":0.76454,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-908"],"published":"2019-09-06T12:00:00Z","modified":"2026-10-20T10:51:38Z","fixes":[{"ecosystem":"crates.io","package":"generator","fixed_in":["0.6.18"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"crates.io","package":"generator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.18"}]}]},{"source":"osv","ecosystem":"crates.io","package":"generator","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.6.18"}]}]},{"source":"osv","ecosystem":"crates.io","package":"generator","ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"0.6.18"}]}]}],"products":[{"vendor":"generator-rs_project","product":"generator-rs"}],"references":[{"url":"https://rustsec.org/advisories/RUSTSEC-2019-0020.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://github.com/Xudong-Huang/generator-rs/issues/9","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16144","tags":["advisory"]},{"url":"https://github.com/Xudong-Huang/generator-rs/issues/11","tags":["web"]},{"url":"https://github.com/Xudong-Huang/generator-rs/issues/13","tags":["web"]},{"url":"https://github.com/Xudong-Huang/generator-rs/issues/14","tags":["web"]},{"url":"https://github.com/advisories/GHSA-6c65-xcf5-299x"},{"url":"https://github.com/Xudong-Huang/generator-rs","tags":["package"]},{"url":"https://crates.io/crates/generator","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2019-16144","description":"An issue was discovered in the generator crate before 0.6.18 for Rust. Uninitialized memory is used by Scope, done, and yield_ during API calls.","status":"published","published":"2019-09-09T12:00:58Z","modified":"2024-08-05T01:10:41.27Z","updated_at":"2026-11-02T14:32:23.189113Z"}],"euvd":[{"id":"EUVD-2021-1596","description":"An issue was discovered in the generator crate before 0.6.18 for Rust. Uninitialized memory is used by Scope, done, and yield_ during API calls.","status":"published","published":"2019-09-09T12:00:58Z","modified":"2024-08-05T01:10:41Z","updated_at":"2026-11-03T02:40:33.179924Z"}],"ghsa":[{"id":"GHSA-6c65-xcf5-299x","title":"Uninitialized memory use in generator","description":"An issue was discovered in the generator crate before 0.6.18 for Rust. Uninitialized memory is used by Scope, done, and yield_ during API calls.","status":"published","published":"2021-08-25T20:58:25Z","modified":"2023-02-01T05:06:03Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-908"],"updated_at":"2026-11-02T14:36:36.66596Z"}],"nvd":[{"id":"CVE-2019-16144","description":"An issue was discovered in the generator crate before 0.6.18 for Rust. Uninitialized memory is used by Scope, done, and yield_ during API calls.","status":"published","published":"2019-09-09T12:15:11.1Z","modified":"2026-06-17T02:21:45.443Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.8,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-908"],"updated_at":"2026-11-02T14:05:25.691233Z"}],"osv":[{"id":"CVE-2019-16144","description":"An issue was discovered in the generator crate before 0.6.18 for Rust. Uninitialized memory is used by Scope, done, and yield_ during API calls.","status":"published","published":"2019-09-09T12:15:11.1Z","modified":"2026-10-20T10:51:38.042632075Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:11.361782Z"},{"id":"GHSA-6c65-xcf5-299x","title":"Uninitialized memory use in generator","description":"An issue was discovered in the generator crate before 0.6.18 for Rust. Uninitialized memory is used by Scope, done, and yield_ during API calls.","status":"published","published":"2021-08-25T20:58:25Z","modified":"2023-11-08T04:01:16.467319Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-908"],"updated_at":"2026-11-02T15:46:39.618611Z"},{"id":"RUSTSEC-2019-0020","title":"fix unsound APIs that could lead to UB","description":"Affected versions of this crate API could use uninitialized memory with some APIs in special\ncases, like use the API in none generator context. This could lead to UB.\nThe flaw was corrected by \u003chttps://github.com/Xudong-Huang/generator-rs/issues/9\u003e\n                          \u003chttps://github.com/Xudong-Huang/generator-rs/issues/11\u003e\n                          \u003chttps://github.com/Xudong-Huang/generator-rs/issues/13\u003e\n                          \u003chttps://github.com/Xudong-Huang/generator-rs/issues/14\u003e                                                  \nThis patch fixes all those issues above.","status":"published","published":"2019-09-06T12:00:00Z","modified":"2023-11-08T04:01:16.467319Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:39.492624Z"}]}}