CVE-2020-36514

The CVE-2020-36514 issue affects the acc_reader crate for Rust (through 2020-12-27). The vulnerability is that fill_buf (and related read_up_to paths) may read from uninitialized memory, allowing potential memory exposure. Multiple connected advisories (OSV GHSA entries, Red Hat and CNVD entries,...

CVE-2020-36513

CVE-2020-36513 concerns the Rust crate acc_reader (up to 2020-12-27) where the read_up_to function may read from uninitialized memory locations. Multiple connected advisories (including GHSA entries and national/DNS variants) describe uninitialized buffers being exposed through Read implementatio...