CVE-2020-25576Critical· 9.8▾ MidnightAn issue was discovered in the rand_core crate before 0.4.2 for Rust. Casting of byte slices to integer slices mishandles alignment constraints.
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 53.9 · likelihood 0.3 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 20.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
1.6%
1.6% → 1.6%
An issue was discovered in the rand_core crate before 0.4.2 for Rust. Casting of byte slices to integer slices mishandles alignment constraints.
rand < 0.4.2Upgrade past the affected range:
rand 0.4.2Connected by shared product, vendor, weakness, or advisory.
RUSTSEC-2026-0097NoneRand is unsound with a custom logger using `rand::rng()`
CVE-2025-22044High· 7.1In the Linux kernel, the following vulnerability has been resolved: acpi: nfit: fix narrowing conversion in acpi_nfit_ctl Syzkaller has reported a warning in to_nfit_bus_uuid(): "only secondary bus families can be translated"
CVE-2026-110816Medium· 5.3### Summary `qs.stringify` with `arrayFormat: 'comma'` throws `TypeError: Cannot convert object to primitive value` when an array element cannot be coerced to a string, such as an object with an own non-callable `toString` (`{ "toStri…
CVE-2026-44324Medium· 6.5free5GC is an open-source implementation of the 5G core network
CVE-2021-35942Critical· 9.1The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an untrusted, crafted pattern, potentially resulting in a denial of service or dis…
CVE-2025-51678High· 7.5An issue was discovered in RISC-V PicoRV32 commit 87c89a