CVE-2021-29934

Name of the Vulnerable Software and Affected Versions uu od crate versions prior to 0.0.4

Description An issue in the PartialReader of the uu od crate allows attackers to read the contents of uninitialized memory locations via a user-provided Read operation. This can result in safe Read implementations reading from the uninitialized buffer, leading to undefined behavior. The flaw was fixed by zero-initializing the passed buffer.

Recommendations For versions prior to 0.0.4, update to version 0.0.4 or later to fix the issue. As a temporary workaround, consider avoiding the use of the PartialReader::read function with user-provided Read operations until the update is applied.