CVE-2021-29934

Out of bounds read in uu_od

7.3 HighFix available

An issue was discovered in PartialReader in the uu_od crate before 0.0.4 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: Low
Integrity: Low
Availability: Low

Exploit likelihood

0.93%Up 0.5 points since Apr 14, 2021

What each source reports

NVD Score used7.3

An issue was discovered in PartialReader in the uu_od crate before 0.0.4 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation.

Record: CVE-2021-29934
CVSS 3.1: 7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-125, CWE-908
Updated: 2026-11-02

CVE ListNo score

An issue was discovered in PartialReader in the uu_od crate before 0.0.4 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation.

Record: CVE-2021-29934
Updated: 2026-11-02

EUVDEUVD-2021-1912No score

An issue was discovered in PartialReader in the uu_od crate before 0.0.4 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation.

Record: EUVD-2021-1912
Updated: 2026-11-03

GitHub AdvisoriesGHSA-w9vv-q986-vj7x7.3

Out of bounds read in uu_od

An issue was discovered in PartialReader in the uu_od crate before 0.0.4 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation.

Record: GHSA-w9vv-q986-vj7x
CVSS 3.1: 7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weakness: CWE-125
Updated: 2026-11-02

OSVGHSA-w9vv-q986-vj7x7.3

Out of bounds read in uu_od

An issue was discovered in PartialReader in the uu_od crate before 0.0.4 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation.

Record: GHSA-w9vv-q986-vj7x
CVSS 3.1: 7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weakness: CWE-125
Updated: 2026-11-02

OSVRUSTSEC-2021-00437.3

PartialReader passes uninitialized memory to user-provided Read

Affected versions of this crate passed an uniniitalized buffer to a user-provided Read instance in PartialReader::read.

This can result in safe Read implementations reading from the uninitialized buffer leading to undefined behavior.

The flaw was fixed in commit 39d62c6 by zero-initializing the passed buffer.

Record: RUSTSEC-2021-0043
CVSS 3.1: 7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated: 2026-11-02

Affected products

uu od project od

Affected packages

Affected packages
Package	Affected	Fixed
`uu_od` crates.io	before 0.0.4	0.0.4
`uu_od` crates.io	0.0.0-0 up to 0.0.4	0.0.4

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-29934 is a high vulnerability (CVSS 7.3) in Uu Od Project Od, published February 17, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.93%, the 61st percentile. Fixed in uu_od 0.0.4.

References

Show 6 moreShow less