CVE-2020-36203

An issue was discovered in the reffers crate through 2020-12-01 for Rust. ARefss can contain a !Send,!Sync object, leading to a data race and memory corruption...

CVE-2020-36203

The CVE-2020-36203 issue concerns the reffers crate for Rust, where ARefss can contain a !Send and/or !Sync object, enabling a data race and memory corruption. The root cause is unsafely allowing Send/Sync traits to be assumed for ARefss, permitting insertion of non-Send/Sync objects via ARefss::...

CVE-2020-36204

An issue was discovered in the im crate through 2020-11-09 for Rust. Because TreeFocus does not have bounds on its Send trait or Sync trait, a data race can occur...

CVE-2020-36205

The CVE-2020-36205 entry concerns the Rust xcb crate (through 2020-12-10). The flaw is in base::Error which does not maintain soundness; a public ptr field enables use-after-free or double-free scenarios. Affected component: xcb crate in Rust. Root cause: misuse of a public pointer field in base:...

CVE-2020-36205

An issue was discovered in the xcb crate through 2020-12-10 for Rust. base::Error does not have soundness. Because of the public ptr field, a use-after-free or double-free can occur...

CVE-2020-36205

An issue was discovered in the xcb crate through 2020-12-10 for Rust. base::Error does not have soundness. Because of the public ptr field, a use-after-free or double-free can occur...

CVE-2020-36206

CVE-2020-36206 involves the Rust crate rusb prior to 0.7.0, where the lack of Send and Sync bounds on the UsbContext can enable a data race and memory corruption. The issue is documented across multiple sources (NVD entry and related advisories) and is specifically attributed to not requiring Sen...

CVE-2020-36206

An issue was discovered in the rusb crate before 0.7.0 for Rust. Because of a lack of Send and Sync bounds, a data race and memory corruption can occur...

CVE-2020-36207

An issue was discovered in the aovec crate through 2020-12-10 for Rust. Because Aovec does not have bounds on its Send trait or Sync trait, a data race and memory corruption can occur...

CVE-2020-36207

CVE-2020-36207 affects the Rust crate name‑sake “aovec” (Aovec). The root cause is that Aovec does not impose bounds on its Send/Sync traits, which can enable data races and memory corruption when values are used across threads. The vulnerability is documented in multiple sources (e.g., RustSec a...

CVE-2020-36209

CVE-2020-36209 concerns the late-static crate (pre-0.4.0) for Rust. The issue arises because Sync is implemented for LateStatic with T: Send, enabling a data race on a type that is Send but not Sync (e.g., Cell). This can lead to memory corruption or undefined behavior as described in multiple so...

CVE-2020-36209

An issue was discovered in the late-static crate before 0.4.0 for Rust. Because Sync is implemented for LateStatic with T: Send, a data race can occur...

CVE-2020-36210

The CVE-2020-36210 entry corresponds to a concrete issue in the Rust crate autorand prior to version 0.2.3. The vulnerability arises because of how impl Random is implemented for arrays: on panic, uninitialized memory could be dropped, potentially causing memory corruption. Public advisories (e.g...

CVE-2020-36210

An issue was discovered in the autorand crate before 0.2.3 for Rust. Because of impl Random on arrays, uninitialized memory can be dropped when a panic occurs, leading to memory corruption...

CVE-2020-36211

An issue was discovered in the gfwx crate before 0.3.0 for Rust. Because ImageChunkMut does not have bounds on its Send trait or Sync trait, a data race and memory corruption can occur...

CVE-2020-36211

CVE-2020-36211 affects the Rust gfwx crate (pre-0.3.0). The issue is that ImageChunkMut does not have bounds on its Send or Sync traits, allowing data races and memory corruption. Remediation documented in RUSTSEC-2020-0104 and related advisories shows the fix: add T: Send to the Send implementat...

CVE-2020-36212

CVE-2020-36212 affects the Rust abi_stable crate (pre-0.9.1). The vulnerability arises from DrainFilter not being sound due to a double drop, leading to potential unsoundness in the crate. The CVE is documented across multiple data sources (NVD, Red Hat, OSV, GHSA) with consistent description; re...

CVE-2020-36212

An issue was discovered in the abistable crate before 0.9.1 for Rust. DrainFilter lacks soundness because of a double drop...

CVE-2020-36213

An issue was discovered in the abistable crate before 0.9.1 for Rust. A retain call can create an invalid UTF-8 string, violating soundness...

CVE-2020-36215

An issue was discovered in the hashconsing crate before 1.1.0 for Rust. Because HConsed does not have bounds on its Send trait or Sync trait, memory corruption can occur...