CVE-2020-36513

An issue was discovered in the accreader crate through 2020-12-27 for Rust. readupto may read from uninitialized memory locations...

kari (=0.1.0), soos-sample-project (=1.0.1) potentially affected by CVE-2020-36513 +1 more via acc_reader (=2.0.0)

accreader CARGO version =2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on accreader and may be impacted: - kari =0.1.0 - soos-sample-project =1.0.1 Source cves: CVE-2020-36513, CVE-2020-36514 Source advisory: OSV:GHSA-HV9V-7W3V-RJ6F...

CVE-2020-36513

CVE-2020-36513 concerns the Rust crate acc_reader (up to 2020-12-27) where the read_up_to function may read from uninitialized memory locations. Multiple connected advisories (including GHSA entries and national/DNS variants) describe uninitialized buffers being exposed through Read implementatio...