https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T19:19:09.987447+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-13696 cnvd-2021-13696 2026-10-19T19:19:09.990652+00:00 cnvd-2021-13696 https://cve.radiocsirt.org/vuln/euvd-2026-24921 EUVD-2026-24921 2026-10-19T19:19:09.990684+00:00 EUVD-2026-24921 https://cve.radiocsirt.org/vuln/fkie_cve-2021-25904 fkie_cve-2021-25904 2026-10-19T19:19:09.990698+00:00

An issue was discovered in the av-data crate before 0.3.0 for Rust. A raw pointer is dereferenced, leading to a read of an arbitrary memory address, sometimes causing a segfault.

 https://cve.radiocsirt.org/vuln/ghsa-352p-rhvq-7g78 GHSA-352p-rhvq-7g78 — Null pointer deference in av-data 2026-10-19T19:19:09.990725+00:00

Affected: crates.io: av-data

An issue was discovered in the av-data crate before 0.3.0 for Rust. A raw pointer is dereferenced, leading to a read of an arbitrary memory address, sometimes causing a segfault.

 https://cve.radiocsirt.org/vuln/gsd-2021-25904 gsd-2021-25904 2026-10-19T19:19:09.990747+00:00 gsd-2021-25904 https://cve.radiocsirt.org/vuln/rustsec-2021-0007 RUSTSEC-2021-0007 — `Frame::copy_from_raw_parts` can lead to segfault without `unsafe` 2026-10-19T19:19:09.990759+00:00

Affected: crates.io: av-data

`fn Frame::copy_from_raw_parts()` is a safe API that can take a raw pointer and dereference it. It is possible to read arbitrary memory address with an arbitrarily fed pointer. This allows the safe API to access & read arbitrary address in memory. Feeding an invalid memory address pointer to the API may also cause the program to segfault.

The flaw was corrected in https://github.com/rust-av/rust-av/pull/137, by removing the API `fn Frame::copy_from_raw_parts()`.