Critical · 9.8 CVE-2020-36512 EUVD-2022-0699GHSA-hmx9-jm3v-33hvGHSA-v938-qcc9-rwv8RUSTSEC-2020-0154

InputStream::read_exact : `Read` on uninitialized buffer causes UB

Published Dec 26, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

An issue was discovered in the buffoon crate through 2020-12-31 for Rust. InputStream::read_exact may read from uninitialized memory locations.

Ecosystem	Package	Affected	Fixed	Record
crates.io	buffoon	<= 0.5.0	—	GHSA-hmx9-jm3v-33hv
crates.io	buffoon	>= 0.0.0-0	—	RUSTSEC-2020-0154