CVE-2021-26952: MS3D Project MS3D

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

An issue was discovered in the ms3d crate before 0.1.3 for Rust. It might allow attackers to obtain sensitive information from uninitialized memory locations via IoReader::read.

Affected products

• MS3D Project MS3D: before 0.1.3 (fixed in 0.1.3)

Published 2021-02-09. Last modified 2026-06-17.