Critical, CVSS 9.8crates.ioPublished
Access of Uninitialized Pointer in linked-hash-map
CVE-2020-25573 · GHSA-r43h-gmrm-h5c9
- Affected
- crates.io linked-hash-map < 0.5.3
- Fixed in
- 0.5.3· Vendor fix available
- Issue
- An issue was discovered in the linked-hash-map crate before 0.5.3 for Rust. It creates an uninitialized NonNull pointer, which violates a non-null constraint.
Recommended action: Upgrade to 0.5.3 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.