CVE-2020-36210: Autorand Project Autorand

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue was discovered in the autorand crate before 0.2.3 for Rust. Because of impl Random on arrays, uninitialized memory can be dropped when a panic occurs, leading to memory corruption.

Affected products

• Autorand Project Autorand: before 0.2.3 (fixed in 0.2.3)

Published 2021-01-26. Last modified 2026-06-17.