Rand Core Project Rand Core vulnerabilities

1 known vulnerability affecting rand_core_project/rand_core.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2021-27378CRITICALCVSS 9.8≥ 0.6.0, < 0.6.22021-02-18

CVE-2021-27378 [CRITICAL] CWE-131 CVE-2021-27378: An issue was discovered in the rand_core crate before 0.6.2 for Rust. Because read_u32_into and read An issue was discovered in the rand_core crate before 0.6.2 for Rust. Because read_u32_into and read_u64_into mishandle certain buffer-length checks, a random number generator may be seeded with too little data.