CVE-2022-46143: Improper Validation of Specified Quantity in Input

Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data...

PT-2021-24262

Name of the Vulnerable Software and Affected Versions: ash crate versions prior to 0.33.1 Description: The issue allows arbitrary Read implementations to read from an uninitialized buffer, potentially exposing memory and returning incorrect byte counts. This can lead to undefined behavior due to...

PT-2021-24263

Name of the Vulnerable Software and Affected Versions: gfx-auxil crate through 2021-01-07 Description: The issue allows arbitrary Read implementations to read from an uninitialized buffer, potentially exposing memory and returning incorrect byte counts. This can lead to undefined behavior due to...