https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T20:57:42.189001+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-26306 CVE-2021-26306 2026-10-07T20:57:42.192060+00:00

An issue was discovered in the raw-cpuid crate before 9.0.0 for Rust. It has unsound transmute calls within as_string() methods.

 https://cve.radiocsirt.org/vuln/ghsa-hvqc-pc78-x9wh GHSA-hvqc-pc78-x9wh — Soundness issue in raw-cpuid 2026-10-07T20:57:42.192107+00:00

Affected: crates.io: raw-cpuid

VendorInfo::as_string(), SoCVendorBrand::as_string(), and ExtendedFunctionInfo::processor_brand_string() construct byte slices using std::slice::from_raw_parts(), with data coming from #[repr(Rust)] structs. This is always undefined behavior. This flaw has been fixed in v9.0.0, by making the relevant structs #[repr(C)].