https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T15:44:23.111486+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-78752 cnvd-2021-78752 2026-10-08T15:44:23.187738+00:00 cnvd-2021-78752 https://cve.radiocsirt.org/vuln/euvd-2026-48183 EUVD-2026-48183 2026-10-08T15:44:23.187821+00:00 EUVD-2026-48183 https://cve.radiocsirt.org/vuln/fkie_cve-2020-36443 fkie_cve-2020-36443 2026-10-08T15:44:23.187836+00:00

An issue was discovered in the libp2p-deflate crate before 0.27.1 for Rust. An uninitialized buffer is passed to AsyncRead::poll_read(), which is a user-provided trait function.

 https://cve.radiocsirt.org/vuln/ghsa-gvcp-948f-8f2p GHSA-gvcp-948f-8f2p — Use of Uninitialized Resource in libp2p-deflate 2026-10-08T15:44:23.187866+00:00

Affected: crates.io: libp2p-deflate

An issue was discovered in the libp2p-deflate crate before 0.27.1 for Rust. An uninitialized buffer is passed to AsyncRead::poll_read(), which is a user-provided trait function.

 https://cve.radiocsirt.org/vuln/gsd-2020-36443 gsd-2020-36443 2026-10-08T15:44:23.187890+00:00 gsd-2020-36443 https://cve.radiocsirt.org/vuln/rustsec-2020-0123 RUSTSEC-2020-0123 — Contents of uninitialized memory exposed in DeflateOutput's AsyncRead implementation 2026-10-08T15:44:23.187901+00:00

Affected: crates.io: libp2p-deflate

Affected versions of this crate passes an uninitialized buffer to a user-provided trait function `AsyncRead::poll_read()`.

Arbitrary `AsyncRead::poll_read()` implementations can read from the uninitialized buffer (memory exposure) and also can return incorrect number of bytes written to the buffer. Reading from uninitialized memory produces undefined values that can quickly invoke undefined behavior.

The flaw was fixed in commit 5ba266a by ensuring the newly allocated part of the buffer is zero-initialized before passing it to a user-provided `AsyncRead::poll_read()`.