An issue exists in the libp2p-deflate crate prior to 0.27.1 for Rust. An uninitialized buffer is passed to AsyncRead::poll_read(), which is a user-provided trait function.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
libp2p libp2p-deflate |