https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 17:57:19 +0000 https://cve.radiocsirt.org/vuln/cve-2021-28030 <p>An issue was discovered in the truetype crate before 0.30.1 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation within Tape::take_bytes.</p> <p>An issue was discovered in the truetype crate before 0.30.1 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation within Tape::take_bytes.</p> https://cve.radiocsirt.org/vuln/cve-2021-28030 https://cve.radiocsirt.org/vuln/rustsec-2021-0029 <p><strong>Affected:</strong> crates.io: truetype</p> <p>Affected versions of this crate passed an unininitialized buffer to a user-provided `Read` instance in `Tape::take_bytes`.</p> <p>This can result in safe `Read` implementations reading from the uninitialized buffer leading to undefined behavior.</p> <p>The flaw was corrected in commit `1f2dc7f37dd` by removing the unsafe block and zero-initializing the buffer.</p> <p><strong>Affected:</strong> crates.io: truetype</p> <p>Affected versions of this crate passed an unininitialized buffer to a user-provided `Read` instance in `Tape::take_bytes`.</p> <p>This can result in safe `Read` implementations reading from the uninitialized buffer leading to undefined behavior.</p> <p>The flaw was corrected in commit `1f2dc7f37dd` by removing the unsafe block and zero-initializing the buffer.</p> https://cve.radiocsirt.org/vuln/rustsec-2021-0029