An issue was discovered in the rand_core crate before 0.4.2 for Rust. Casting of byte slices to integer slices mishandles alignment constraints.

...

PT-2021-17424

Name of the Vulnerable Software and Affected Versions rand core crate versions prior to 0.6.2 Description An issue was discovered in the rand core crate where the functions read u32 into and read u64 into mishandle certain buffer-length checks. This can cause a random number generator to be seede...