← All advisories

Critical severity9.8NVD Advisory· Published Dec 27, 2021· Updated Jun 17, 2026

CVE-2021-45688

CVE-2021-45688

Description

An issue was discovered in the ash crate before 0.33.1 for Rust. util::read_spv may read from uninitialized memory locations.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
ashcrates.io	< 0.33.1	0.33.1

Affected products

3

Ash Rs/Ash
cpe:2.3:a:ash-rs:ash:*:*:*:*:*:rust:*:*
Range: <0.33.1
ash/ashdescription
ghsa-coords
pkg:cargo/ash
Range: < 0.33.1

Patches

Vulnerability mechanics

References

9

github.com/advisories/GHSA-64wv-8vwp-xgw2ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-45688ghsaADVISORY
raw.githubusercontent.com/rustsec/advisory-db/main/crates/ash/RUSTSEC-2021-0090.mdnvdThird Party AdvisoryWEB
rustsec.org/advisories/RUSTSEC-2021-0090.htmlnvdThird Party AdvisoryWEB
github.com/MaikKlein/ash/issues/354ghsaWEB
github.com/ash-rs/ash/commit/2c98b6f384a017de031698bd623551a45f24c8f9ghsaWEB
github.com/ash-rs/ash/compare/0.33.0...0.33.1ghsaWEB
github.com/ash-rs/ash/issues/354ghsaWEB
github.com/ash-rs/ash/pull/470ghsaWEB

News mentions

0

No linked articles in our index yet.