high7.5
CVE-2021-28030
An issue was discovered in the truetype crate before 0.30.1 for Rust.
Impact
An issue was discovered in the truetype crate before 0.30.1 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation within Tape::take_bytes.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Truetype Project | Truetype | before 0.30.1 |