HIGH

GHSA-72r2-rg28-47v9

`read` on uninitialized buffer may cause UB (bite::read::BiteReadExpandedExt::read_framed_max)

Details

Affected versions of this crate calls a user provided `Read` implementation on an uninitialized buffer. `Read` on uninitialized buffer is defined as undefined behavior in Rust.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/bite

Introduced in: 0

No fixed version published yet for bite. Pin to a known-safe version or switch to an alternative.

References

https://github.com/hinaria/bite/issues/1[WEB]
https://github.com/hinaria/bite[PACKAGE]
https://rustsec.org/advisories/RUSTSEC-2020-0153.html[WEB]