CVE-2020-25576

CriticalCVSS 9.8

Published: 14/09/2020(UTC)Updated: 19/08/2026(UTC)Translated: 20/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.56%

73th percentile - higher than 73% of all known CVEs

In the rand_core crate for Rust before version 0.4.2, casting byte slices to integer slices mishandles alignment constraints.

This could lead to improper memory access, potentially causing crashes or undefined behavior in programs using this library.

Update the rand_core crate to version 0.4.2 or later to avoid alignment issues.

Original NVD description (English source)

An issue was discovered in the rand_core crate before 0.4.2 for Rust. Casting of byte slices to integer slices mishandles alignment constraints.