CVE-2020-36512: 
Rust vulnerability analysis and mitigation

An issue was discovered in the buffoon crate through 2020-12-31 for Rust, where InputStream::read_exact may read from uninitialized memory locations. The vulnerability was reported on December 31, 2020, and was issued on August 21, 2021. This vulnerability has been assigned CVE-2020-36512 and affects all versions of the buffoon crate (RustSec Advisory).

The vulnerability occurs when the crate passes an uninitialized buffer to a user-provided Read implementation. The Read implementations can read from the uninitialized buffer, leading to memory exposure. Additionally, these implementations can return an incorrect number of bytes written to the buffer. Reading from uninitialized memory produces undefined values that can quickly invoke undefined behavior (Github Issue).

The vulnerability can lead to memory exposure, where sensitive data from uninitialized memory locations could be exposed. Additionally, the undefined behavior resulting from reading uninitialized memory could potentially lead to application crashes or other unpredictable behavior (RustSec Advisory).

As of the latest available information, there are no patched versions of the buffoon crate available to address this vulnerability (RustSec Advisory).