Lucene search

K
osvGoogleOSV:GHSA-C3CW-C387-PJ65
HistoryAug 25, 2021 - 8:43 p.m.

Double free in crossbeam

2021-08-2520:43:21
Google
osv.dev
5

0.002 Low

EPSS

Percentile

60.7%

Even if an element is popped from a queue, crossbeam would run its destructor inside the epoch-based garbage collector. This is a source of double frees.

The flaw was corrected by wrapping elements inside queues in a ManuallyDrop.

CPENameOperatorVersion
crossbeamlt0.4.1
crossbeamge0.4.0

0.002 Low

EPSS

Percentile

60.7%