CVE-2020-25576

CRITICAL 9.8CVE-2020-25576 · Published 14/09/2020 · updated 19/08/2026

In short

CVE-2020-25576 is a CRITICAL (CVSS 9.8) vulnerability affecting rand (rust-random).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 76.0% of all vulnerabilities.
Fix: update to 0.4.2 or later.

Package	Affected versions	Patched versions
rand rust-random	`< 0.4.2`	`0.4.2`

An issue was discovered in the rand_core crate before 0.4.2 for Rust. Casting of byte slices to integer slices mishandles alignment constraints.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.