
Cloud Vulnerability DB
A community-led vulnerabilities database
An issue was discovered in the columnar crate through 2021-01-07 for Rust, identified as RUSTSEC-2022-0087. The vulnerability involves the ColumnarReadExt::readtypedvec function which may read from uninitialized memory locations, potentially exposing sensitive data (NIST NVD).
The vulnerability has been assigned a CVSS v3.1 Base Score of 9.8 (CRITICAL) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. The issue is classified under CWE-908 (Use of Uninitialized Resource). The vulnerability affects all versions of the columnar crate up to and including version 0.0.19 (NIST NVD).
The vulnerability allows potential access to uninitialized memory locations, which could lead to information disclosure, system compromise, or other security breaches. Given the CRITICAL CVSS score, the impact is considered severe with potential for complete compromise of system confidentiality, integrity, and availability (NIST NVD).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."