CVE-2021-25904: AV-Data Project AV-Data

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

An issue was discovered in the av-data crate before 0.3.0 for Rust. A raw pointer is dereferenced, leading to a read of an arbitrary memory address, sometimes causing a segfault.

Affected products

• AV-Data Project AV-Data: before 0.3.0 (fixed in 0.3.0)

Published 2021-01-26. Last modified 2026-06-17.