Описание
Use of Uninitialized Resource in truetype
An issue was discovered in the truetype crate before 0.30.1 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation within Tape::take_bytes.
Пакеты
Наименование
truetype
rust
Затронутые версииВерсия исправления
< 0.30.1
0.30.1
Связанные уязвимости
CVSS3: 7.5
nvd
почти 5 лет назад
An issue was discovered in the truetype crate before 0.30.1 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation within Tape::take_bytes.