CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2020-36210
High (7.8) in autorand project autorand. EPSS 0.4% chance of exploitation in the next 30 days. Fixed in autorand 0.2.3.
An issue was discovered in the autorand crate before 0.2.3 for Rust. Because of impl Random on arrays, uninitialized memory can be dropped when a panic occurs, leading to memory corruption.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 37% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-787, CWE-908
- Published
- Modified
- Record from
- the NVD, synced
Affected
- autorand_project:autorand
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-cgmg-2v6m-fjg7 | crates.io | autorand | <0.2.3 | 0.2.3 |
| RUSTSEC-2020-0103 | crates.io | autorand | >=0.0.0-0 <0.2.3 | 0.2.3 |