Security Advisory
CVE-2019-16138
9.8
CRITICAL
Vulnerability Description
An issue was discovered in the image crate before 0.21.3 for Rust, affecting the HDR image format decoder. Vec::set_len is called on an uninitialized vector, leading to a use-after-free and arbitrary code execution.
Published Date
September 9, 2019
Official Source
NIST NVD Advisory