https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 25 Oct 2026 17:47:14 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-13654 cnvd-2021-13654 https://cve.radiocsirt.org/vuln/cnvd-2021-13654 https://cve.radiocsirt.org/vuln/euvd-2026-25221 EUVD-2026-25221 https://cve.radiocsirt.org/vuln/euvd-2026-25221 https://cve.radiocsirt.org/vuln/fkie_cve-2021-26951 <p>An issue was discovered in the calamine crate before 0.17.0 for Rust. It allows attackers to overwrite heap-memory locations because Vec::set_len is used without proper memory claiming, and this uninitialized memory is used for a user-provided Read operation, as demonstrated by Sectors::get.</p> <p>An issue was discovered in the calamine crate before 0.17.0 for Rust. It allows attackers to overwrite heap-memory locations because Vec::set_len is used without proper memory claiming, and this uninitialized memory is used for a user-provided Read operation, as demonstrated by Sectors::get.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-26951 https://cve.radiocsirt.org/vuln/ghsa-ppqp-78xx-3r38 <p><strong>Affected:</strong> crates.io: calamine</p> <p>An issue was discovered in the calamine crate before 0.17.0 for Rust. It allows attackers to overwrite heap-memory locations because Vec::set_len is used without proper memory claiming, and this uninitialized memory is used for a user-provided Read operation, as demonstrated by Sectors::get.</p> <p><strong>Affected:</strong> crates.io: calamine</p> <p>An issue was discovered in the calamine crate before 0.17.0 for Rust. It allows attackers to overwrite heap-memory locations because Vec::set_len is used without proper memory claiming, and this uninitialized memory is used for a user-provided Read operation, as demonstrated by Sectors::get.</p> https://cve.radiocsirt.org/vuln/ghsa-ppqp-78xx-3r38 https://cve.radiocsirt.org/vuln/gsd-2021-26951 gsd-2021-26951 https://cve.radiocsirt.org/vuln/gsd-2021-26951 https://cve.radiocsirt.org/vuln/rustsec-2021-0015 <p><strong>Affected:</strong> crates.io: calamine</p> <p>Affected versions of this crate arbitrarily calls `Vec::set_len` to increase length of a vector without claiming more memory for the vector. Affected versions of this crate also calls user-provided `Read` on the uninitialized memory of the vector that was extended with `Vec::set_len`.</p> <p>This can overwrite active entities in adjacent heap memory and seems to be a major security issue. Also, calling user-provided `Read` on uninitialized memory is defined as UB in Rust.</p> <p><strong>Affected:</strong> crates.io: calamine</p> <p>Affected versions of this crate arbitrarily calls `Vec::set_len` to increase length of a vector without claiming more memory for the vector. Affected versions of this crate also calls user-provided `Read` on the uninitialized memory of the vector that was extended with `Vec::set_len`.</p> <p>This can overwrite active entities in adjacent heap memory and seems to be a major security issue. Also, calling user-provided `Read` on uninitialized memory is defined as UB in Rust.</p> https://cve.radiocsirt.org/vuln/rustsec-2021-0015