CVE-2021-28030

An issue was discovered in the truetype crate before 0.30.1 for Rust

published March 5, 2021

CVSS
—
EPSS
1%
Percentile
67.3
In the wild
Unconfirmed
What it is

An issue was discovered in the truetype crate before 0.30.1 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation within Tape::take_bytes.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01175 · 67.3th percentile
Published
2021-03-05T08:40Z
EPSS history
Timeline
  • 05 MAR 08:40Z
    An issue was discovered in the truetype crate before 0.30.1 for Rust
    cvelistv5