CVE-2020-36514

An issue was discovered in the accreader crate through 2020-12-27 for Rust. fillbuf may read from uninitialized memory locations...

CVE-2020-36514

The CVE-2020-36514 issue affects the acc_reader crate for Rust (through 2020-12-27). The vulnerability is that fill_buf (and related read_up_to paths) may read from uninitialized memory, allowing potential memory exposure. Multiple connected advisories (OSV GHSA entries, Red Hat and CNVD entries,...

kari (0.1.0), soos-sample-project (1.0.1) potentially affected by CVE-2020-36513 +1 more via acc_reader (2.0.0)

accreader CARGO version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on accreader and may be impacted: - kari 0.1.0 - soos-sample-project 1.0.1 Source cves: CVE-2020-36513, CVE-2020-36514 Source advisory: OSV:RUSTSEC-2020-0155...