An issue exists in the messagepack-rs crate through 2021-01-26 for Rust. deserialize_string may read from uninitialized memory locations.
messagepack-rs project messagepack-rs