12384 matches found
CVE-2025-48753
In the anode crate 0.1.0 for Rust, data races can occur in unlock in SpinLock...
CVE-2025-48752
In the process-sync crate 0.2.2 for Rust, the drop function lacks a check for whether the pthreadmutex is unlocked...
CVE-2025-48752
In the process-sync crate 0.2.2 for Rust, the drop function lacks a check for whether the pthreadmutex is unlocked...
CVE-2025-48756
In groupnumber in the scsir crate 0.2.0 for Rust, there can be an overflow because a hardware device may expect a small number of bits e.g., 5 bits for group number...
CVE-2025-48753: Concurrent Execution using Shared Resource with Improper Synchronization
In the anode crate 0.1.0 for Rust, data races can occur in unlock in SpinLock...
CVE-2025-48752: Use After Free
In the process-sync crate 0.2.2 for Rust, the drop function lacks a check for whether the pthreadmutex is unlocked...
CVE-2025-48751
The processlock crate 0.1.0 for Rust allows data races in unlock...
CVE-2025-48755
In the spiral-rs crate 0.2.0 for Rust, allocation can be attempted for a ZST zero-sized type...
Rust security vulnerabilities
Rust is a general-purpose, compiled programming language from the Mozilla Foundation in the United States. A security vulnerability exists in Rust that stems from a possible overflow in groupnumber, where a hardware device may expect a small number of bits to be used to represent a group number...
PT-2025-22831
Name of the Vulnerable Software and Affected Versions memory pages crate version 0.1.0 Description The issue is related to division by zero in the memory pages crate for Rust. Recommendations For memory pages crate version 0.1.0, update to a version that fixes the division by zero issue. At the...
CVE-2025-48756
In groupnumber in the scsir crate 0.2.0 for Rust, there can be an overflow because a hardware device may expect a small number of bits e.g., 5 bits for group number...
CVE-2025-48753
CVE-2025-48753 affects the anode crate 0.1.0 for Rust. The issue is a data race in SpinLock_UNLOCK, arising from the unlock path, which can lead to concurrent access problems. The NVD CVSSv3.1 vector indicates a CRITICAL impact (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) with network attack vector, hig...
CVE-2025-48752
In the Rust process-sync crate, version 0.2.2, the Drop implementation fails to verify whether the pthread_mutex is unlocked. This is the stated root cause of CVE-2025-48752, per multiple connected feeds. The sources do not provide exploit details, affected vectors beyond the mutex unlock check i...
CVE-2025-48756
The CVE-2025-48756 entry concerns the scsir crate (Rust) version 0.2.0, where the function group_number can overflow when a hardware device expects a small number of bits (for example 5) to represent the group number. This is the stated root cause and aligns with the NVD description. The availabl...
CVE-2025-48751
CVE-2025-48751 involves the Rust crate process_lock version 0.1.0. The available documents describe a race condition in the unlock pathway that can lead to data races and potentially unpredictable behavior. Concrete details across sources confirm the affected component (the unlock logic in the pr...
CVE-2025-48754
CVE-2025-48754 affects the memory_pages crate 0.1.0 for Rust, where a division by zero can occur. Public sources corroborate the issue (NVD CVSS 3.1 base score 7.5 HIGH; GHSA/Red Hat entries describe the same division-by-zero problem). The connected documents do not provide a concrete patch versi...
CVE-2025-48751: Concurrent Execution using Shared Resource with Improper Synchronization
The processlock crate 0.1.0 for Rust allows data races in unlock...
CVE-2025-48756: Access of Resource Using Incompatible Type
In groupnumber in the scsir crate 0.2.0 for Rust, there can be an overflow because a hardware device may expect a small number of bits e.g., 5 bits for group number...
