Description
An issue was discovered in the truetype crate before 0.30.1 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation within Tape::take_bytes.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | truetype | < 0.30.1 | 0.30.1 | GHSA-v7q4-97x4-4qw2 |
| crates.io | truetype | >= 0.0.0-0, < 0.30.1 | 0.30.1 | RUSTSEC-2021-0029 |