~ / search / GHSA-cgmg-2v6m-fjg7

GHSA-cgmg-2v6m-fjg7

Free of uninitialized memory in autorand

Source: GitHub Advisory Database (reviewed) High CVE-2020-36210

Packages

EcosystemPackageAffectedFixed in
crates.io autorand < 0.2.3 0.2.3

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in the autorand crate before 0.2.3 for Rust. Because of impl Random on arrays, uninitialized memory can be dropped when a panic occurs, leading to memory corruption.

References

External links from the advisory. They lead to third-party sites.