Vulnerabilities (CVE)

Filtered by vendor Nanorand Project Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-45705 1 Nanorand Project 1 Nanorand 2023-12-10 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the nanorand crate before 0.6.1 for Rust. There can be multiple mutable references to the same object because the TlsWyRand Deref implementation dereferences a raw pointer.
CVE-2020-35926 1 Nanorand Project 1 Nanorand 2023-12-10 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the nanorand crate before 0.5.1 for Rust. It caused any random number generator (even ChaCha) to return all zeroes because integer truncation was mishandled.