A memory safety issue was found in mz-avro in Rust. Arbitrary Read implementations can read from the uninitialized buffer and also can return an incorrect number of bytes written to the buffer. Reading from uninitialized memory produces undefined values that can quickly invoke undefined behavior. Note: This is relevant only where a user provides a struct whose Read implementation inspects the buffer passed to read_exact before writing to it. Version 0.7.0 of this crate contains a patch for this issue.