https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T09:22:23.156563+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-25485 EUVD-2026-25485 2026-10-04T09:22:23.167165+00:00 EUVD-2026-25485 https://cve.radiocsirt.org/vuln/fkie_cve-2021-27378 fkie_cve-2021-27378 2026-10-04T09:22:23.167203+00:00

An issue was discovered in the rand_core crate before 0.6.2 for Rust. Because read_u32_into and read_u64_into mishandle certain buffer-length checks, a random number generator may be seeded with too little data.

 https://cve.radiocsirt.org/vuln/ghsa-w7j2-35mf-95p7 GHSA-w7j2-35mf-95p7 — Incorrect check on buffer length in rand_core 2026-10-04T09:22:23.167249+00:00

Affected: crates.io: rand_core

An issue was discovered in the rand_core crate before 0.6.2 for Rust. Because `read_u32_into` and `read_u64_into` mishandle certain buffer-length checks, a random number generator may be seeded with too little data. The vulnerability was introduced in v0.6.0. The advisory doesn't apply to earlier minor version numbers.

Because read_u32_into and read_u64_into mishandle certain buffer-length checks, a random number generator may be seeded with too little data.

 https://cve.radiocsirt.org/vuln/gsd-2021-27378 gsd-2021-27378 2026-10-04T09:22:23.167278+00:00 gsd-2021-27378 https://cve.radiocsirt.org/vuln/msrc_cve-2021-27378 msrc_CVE-2021-27378 — An issue was discovered in the rand_core crate before 0.6.2 for Rust. Because read_u32_into and read_u64_into mishandle… 2026-10-04T09:22:23.167292+00:00 msrc_CVE-2021-27378 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11751-1 openSUSE-SU-2024:11751-1 — afterburn-5.0.0-6.1 on GA media 2026-10-04T09:22:23.167310+00:00

afterburn-5.0.0-6.1 on GA media

 https://cve.radiocsirt.org/vuln/rustsec-2021-0023 RUSTSEC-2021-0023 — Incorrect check on buffer length when seeding RNGs 2026-10-04T09:22:23.167330+00:00

Affected: crates.io: rand_core

Summary: rand_core::le::read_u32_into and read_u64_into have incorrect checks on the source buffer length, allowing the destination buffer to be under-filled.

Implications: some downstream RNGs, including Hc128Rng (but not the more widely used ChaCha*Rng), allow seeding using the SeedableRng::from_seed trait-function with too short keys.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-27378 UBUNTU-CVE-2021-27378 2026-10-04T09:22:23.167351+00:00

Affected: Ubuntu:20.04:LTS: rust-rand-core, Ubuntu:22.04:LTS: rust-rand-core, Ubuntu:24.04:LTS: rust-rand-core, Ubuntu:25.10: rust-rand-core, Ubuntu:26.04:LTS: rust-rand-core

An issue was discovered in the rand_core crate before 0.6.2 for Rust. Because read_u32_into and read_u64_into mishandle certain buffer-length checks, a random number generator may be seeded with too little data.