Vulnerabilities > CVE-2021-28030 - Use of Uninitialized Resource vulnerability in Truetype Project Truetype

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
truetype-project
CWE-908
NVD
Published: 2021-03-05
Updated: 2021-03-05

Summary

An issue was discovered in the truetype crate before 0.30.1 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation within Tape::take_bytes.

Vulnerable Configurations

Part Description Count
Application
Truetype_Project
49

Common Weakness Enumeration (CWE)

References