CVE-2021-45689: 
Rust vulnerability analysis and mitigation

An issue was discovered in the gfx-auxil crate through 2021-01-07 for Rust. The gfxauxil::readspirv function may read from uninitialized memory locations, which could lead to memory exposure and undefined behavior (RustSec Advisory, NVD).

The vulnerability occurs when the crate passes an uninitialized buffer to a user-provided Read implementation. The Read implementations can read from the uninitialized buffer, leading to memory exposure, and can also return an incorrect number of bytes written to the buffer. Reading from uninitialized memory produces undefined values that can quickly invoke undefined behavior (RustSec Advisory).

The vulnerability can lead to memory exposure, where sensitive data from uninitialized memory locations could be exposed. Additionally, the undefined behavior resulting from reading uninitialized memory could potentially lead to application crashes or other unpredictable behavior (RustSec Advisory).

As of the disclosure date, there are no patched versions available for this vulnerability (RustSec Advisory).