Most recent entries from all

EUVD-2026-25485

fkie_cve-2021-27378

An issue was discovered in the rand_core crate before 0.6.2 for Rust. Because read_u32_into and read_u64_into mishandle certain buffer-length checks, a random number generator may be seeded with too little data.

GHSA-w7j2-35mf-95p7 — Incorrect check on buffer length in rand_core

Affected: crates.io: rand_core

An issue was discovered in the rand_core crate before 0.6.2 for Rust. Because `read_u32_into` and `read_u64_into` mishandle certain buffer-length checks, a random number generator may be seeded with too little data. The vulnerability was introduced in v0.6.0. The advisory doesn't apply to earlier minor version numbers.

Because read_u32_into and read_u64_into mishandle certain buffer-length checks, a random number generator may be seeded with too little data.

gsd-2021-27378

msrc_CVE-2021-27378 — An issue was discovered in the rand_core crate before 0.6.2 for Rust. Because read_u32_into and read_u64_into mishandle…

msrc_CVE-2021-27378

openSUSE-SU-2024:11751-1 — afterburn-5.0.0-6.1 on GA media

afterburn-5.0.0-6.1 on GA media

RUSTSEC-2021-0023 — Incorrect check on buffer length when seeding RNGs

Affected: crates.io: rand_core

Summary: rand_core::le::read_u32_into and read_u64_into have incorrect checks on the source buffer length, allowing the destination buffer to be under-filled.

Implications: some downstream RNGs, including Hc128Rng (but not the more widely used ChaCha*Rng), allow seeding using the SeedableRng::from_seed trait-function with too short keys.

UBUNTU-CVE-2021-27378

Affected: Ubuntu:20.04:LTS: rust-rand-core, Ubuntu:22.04:LTS: rust-rand-core, Ubuntu:24.04:LTS: rust-rand-core, Ubuntu:25.10: rust-rand-core, Ubuntu:26.04:LTS: rust-rand-core