CVE-2020-35916

The CVE-2020-35916 issue affects the Rust image crate, specifically versions before 0.23.12. The root cause is described as a Mutable reference having immutable provenance, with an example note that in LLVM IR the provenance may always be correct. The connected sources (NVD/OSS/Nessus/GHSA/Red Ha...

CVE-2019-16138

CVE-2019-16138 affects the Rust image crate, specifically the HDR image format decoder, where Vec::set_len is invoked on an uninitialized vector, causing a use-after-free and potential arbitrary code execution. The issue impacts the image crate prior to version 0.21.3. According to the connected ...