CVE-2019-16138

An issue was discovered in the image crate before 0.21.3 for Rust, affecting the HDR image format decoder. Vec::setlen is called on an uninitialized vector, leading to a use-after-free and arbitrary code execution...

airust (0.1.6), akaze (>=0.1.0, <=0.1.2) +300 more potentially affected by CVE-2019-16138 via image (>=0.10.4, <=0.20.1)

image CARGO version =0.10.4, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.5, =0.1.0, =0.1.0, =0.1.0, =0.11.0, =0.1.0, =0.1.0, =0.0.4, =0.1.0, =0.2.8 and more Source cves: CVE-2019-16138 Source advisory: OSV:GHSA-M2PF-HPRP-3VQM...

CVE-2019-16138

An issue was discovered in the image crate before 0.21.3 for Rust, affecting the HDR image format decoder. Vec::setlen is called on an uninitialized vector, leading to a use-after-free and arbitrary code execution...

CVE-2019-16138

An issue was discovered in the image crate before 0.21.3 for Rust, affecting the HDR image format decoder. Vec::setlen is called on an uninitialized vector, leading to a use-after-free and arbitrary code execution...