high7.8
CVE-2020-36210
Free of uninitialized memory in autorand
Impact
An issue was discovered in the autorand crate before 0.2.3 for Rust. Because of impl Random on arrays, uninitialized memory can be dropped when a panic occurs, leading to memory corruption.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| rust | autorand | < 0.2.3 | 0.2.3 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Autorand Project | Autorand | before 0.2.3 |