Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 20:09:01 +0000 cnvd-2021-17264 https://cve.radiocsirt.org/vuln/cnvd-2021-17264 cnvd-2021-17264 https://cve.radiocsirt.org/vuln/cnvd-2021-17264 EUVD-2026-25796 https://cve.radiocsirt.org/vuln/euvd-2026-25796 EUVD-2026-25796 https://cve.radiocsirt.org/vuln/euvd-2026-25796 fkie_cve-2021-28030 https://cve.radiocsirt.org/vuln/fkie_cve-2021-28030 <p>An issue was discovered in the truetype crate before 0.30.1 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation within Tape::take_bytes.</p> <p>An issue was discovered in the truetype crate before 0.30.1 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation within Tape::take_bytes.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-28030 GHSA-v7q4-97x4-4qw2 — Use of Uninitialized Resource in truetype https://cve.radiocsirt.org/vuln/ghsa-v7q4-97x4-4qw2 <p><strong>Affected:</strong> crates.io: truetype</p> <p>An issue was discovered in the truetype crate before 0.30.1 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation within Tape::take_bytes.</p> <p><strong>Affected:</strong> crates.io: truetype</p> <p>An issue was discovered in the truetype crate before 0.30.1 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation within Tape::take_bytes.</p> https://cve.radiocsirt.org/vuln/ghsa-v7q4-97x4-4qw2 gsd-2021-28030 https://cve.radiocsirt.org/vuln/gsd-2021-28030 gsd-2021-28030 https://cve.radiocsirt.org/vuln/gsd-2021-28030 RUSTSEC-2021-0029 — Tape::take_bytes exposes uninitialized memory to a user-provided Read https://cve.radiocsirt.org/vuln/rustsec-2021-0029 <p><strong>Affected:</strong> crates.io: truetype</p> <p>Affected versions of this crate passed an unininitialized buffer to a user-provided `Read` instance in `Tape::take_bytes`.</p> <p>This can result in safe `Read` implementations reading from the uninitialized buffer leading to undefined behavior.</p> <p>The flaw was corrected in commit `1f2dc7f37dd` by removing the unsafe block and zero-initializing the buffer.</p> <p><strong>Affected:</strong> crates.io: truetype</p> <p>Affected versions of this crate passed an unininitialized buffer to a user-provided `Read` instance in `Tape::take_bytes`.</p> <p>This can result in safe `Read` implementations reading from the uninitialized buffer leading to undefined behavior.</p> <p>The flaw was corrected in commit `1f2dc7f37dd` by removing the unsafe block and zero-initializing the buffer.</p> https://cve.radiocsirt.org/vuln/rustsec-2021-0029