cberner/fuser · Security
FUSE-Rust: Uninitalized memory read and leak caused by fuser crate
- GHSA ID
- GHSA-cvmj-47v9-35m9
- Severity
- high
- Published
- Updated
- CVSS v4
- 8.2 · CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Description
During the creation of a new libfuse session with fuse_session_new, the operation list was passed as NULL incorrectly. libfuse expects this argument to always point to list of operations. This caused uninitialized memory read and leaks in libfuse.so.
CWEs
- CWE-908 · Use of Uninitialized Resource