critical9.8
CVE-2019-16138
An issue was discovered in the image crate before 0.21.3 for Rust, affecting the HDR image format decoder.
Impact
An issue was discovered in the image crate before 0.21.3 for Rust, affecting the HDR image format decoder. Vec::set_len is called on an uninitialized vector, leading to a use-after-free and arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Image-Rs | Image | from 0.10.2 before 0.21.3 |