{"id":"CVE-2021-29937","aliases":["GHSA-hpcx-3pw8-g3j2"],"title":"Free of uninitialized memory in telemetry","summary":"Free of uninitialized memory in telemetry","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","vendor":"telemetry","product":"telemetry","ecosystem":"rust","affected":["telemetry < 0.1.3"],"patched":["telemetry 0.1.3"],"published":"2021-08-25","updated":"2026-08-29","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-hpcx-3pw8-g3j2","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-29937"},{"url":"https://github.com/Yoric/telemetry.rs/issues/45"},{"url":"https://github.com/Yoric/telemetry.rs/commit/2820cf12f2e08645fd6d1f15b4a90a54d6082a81"},{"url":"https://github.com/Yoric/telemetry.rs"},{"url":"https://rustsec.org/advisories/RUSTSEC-2021-0046.html"}],"tags":["osv","rust"],"epss":0.01363,"epssPercentile":0.70558,"ingestedAt":"2026-08-29T19:29:15.756Z","slug":"CVE-2021-29937","body":"## Overview\n\nAn issue was discovered in the telemetry crate through 0.1.2 for Rust. There is a drop of uninitialized memory if a value.clone() call panics within misc::vec_with_size()\n\n## Affected packages\n\n- `telemetry < 0.1.3`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `telemetry 0.1.3`","depth":"midnight","depthScore":54,"depthScoreParts":{"impact":53.9,"likelihood":0.3,"exploitation":0,"ransomware":0},"changes":[]}