CVE-2019-16138

Publication date

2019-09-09 11:49:30

Family

mitre

State

PUBLISHED

Description

An issue was discovered in the image crate before 0.21.3 for Rust, affecting the HDR image format decoder. Vec::set_len is called on an uninitialized vector, leading to a use-after-free and arbitrary code execution.