CVE-2020-36443: LIBP2P LIBP2P-Deflate

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

An issue was discovered in the libp2p-deflate crate before 0.27.1 for Rust. An uninitialized buffer is passed to AsyncRead::poll_read(), which is a user-provided trait function.

Affected products

• LIBP2P LIBP2P-Deflate: before 0.27.1 (fixed in 0.27.1)

Published 2021-08-08. Last modified 2026-06-17.