Critical severity9.8NVD Advisory· Published Apr 11, 2021· Updated Jun 17, 2026
CVE-2021-28879
CVE-2021-28879
Description
In the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect size due to an integer overflow. This bug can lead to a buffer overflow when a consumed Zip iterator is used again.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
- Rust/Rustdescription
Patches
Vulnerability mechanics
References
6- github.com/rust-lang/rust/pull/82289nvdPatchThird Party Advisory
- github.com/rust-lang/rust/issues/82282nvdExploitIssue TrackingThird Party Advisory
- security.gentoo.org/glsa/202210-09nvdThird Party Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CZ337CM4GFJLRDFVQCGC7J25V65JXOG5/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TFUO3URYCO73D2Q4WYJBWAMJWGGVXQO4/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZG65GUW6Z2CYOQHF7T3TB5CZKIX6ZJE/nvd
News mentions
0No linked articles in our index yet.