EPSS
Percentile
53.8%
An issue was discovered in the truetype crate before 0.30.1 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation within Tape::take_bytes.
github.com/bodoni/truetype
github.com/bodoni/truetype/issues/11
nvd.nist.gov/vuln/detail/CVE-2021-28030
rustsec.org/advisories/RUSTSEC-2021-0029.html