Undefined Behavior

encoding/xml in github.com/golang/go is vulnerable to undefined behavior. The vulnerability is possible because it does not correctly preserve the semantics of directives during tokenization round-trips...

RUSTSEC-2020-0114 `Demuxer` can carry non-Send types across thread boundaries

In the affected versions of this crate, Demuxer unconditionally implemented Send with no trait bounds on T. This allows sending a non-Send type T across thread boundaries, which can cause undefined behavior like unlocking a mutex from a thread that didn't lock the mutex, or memory corruption from...

`Demuxer` can carry non-Send types across thread boundaries

In the affected versions of this crate, Demuxer unconditionally implemented Send with no trait bounds on T. This allows sending a non-Send type T across thread boundaries, which can cause undefined behavior like unlocking a mutex from a thread that didn't lock the mutex, or memory corruption from...

PT-2020-17579

Name of the Vulnerable Software and Affected Versions conquer-once versions prior to 0.3.2 Description An issue in the conquer-once crate allows non-Send but Sync types, such as MutexGuard, to be sent across threads, leading to undefined behavior and memory corruption in concurrent programs. This...

PT-2020-17593

Name of the Vulnerable Software and Affected Versions va-ts crate versions prior to 0.0.4 Description The issue arises from the Demuxer implementation in the va-ts crate, which lacks a required T: Send bound. This omission allows sending a non-Send type T across thread boundaries, potentially...

Soundness issue: Input<R> can be misused to create data race to an object

Input implements Send without requiring R: Send. Affected versions of this crate allows users to send non-Send types to other threads, which can lead to undefined behavior such as data race and memory corruption. The flaw was corrected in version 0.5.1 by adding R: Send bound to the Send impl of...

RUSTSEC-2020-0108 Soundness issue: Input<R> can be misused to create data race to an object

Input implements Send without requiring R: Send. Affected versions of this crate allows users to send non-Send types to other threads, which can lead to undefined behavior such as data race and memory corruption. The flaw was corrected in version 0.5.1 by adding R: Send bound to the Send impl of...

RUSTSEC-2020-0106 Queues allow non-Send types to be sent to other threads, allowing data races

Affected versions of this crate unconditionally implemented Send for types used in queue implementations InnerSend, InnerRecv, FutInnerSend, FutInnerRecv. This allows users to send non-Send types to other threads, which can lead to data race bugs or other undefined behavior. The flaw was correcte...

PT-2020-17586

Name of the Vulnerable Software and Affected Versions multiqueue2 crate versions prior to 0.1.7 Description An issue in the multiqueue2 crate allows users to send non-Send types to other threads, which can lead to data race bugs or other undefined behavior. This occurs because the crate...

RUSTSEC-2020-0127 SyncRef's clone() and debug() allow data races

Affected versions of this crate unconditionally implement Sync for SyncRef. This definition allows data races if &T is accessible through &SyncRef. SyncRef derives Clone and Debug, and the default implementations of those traits access &T by invoking T::clone & T::fmt. It is possible to create da...

SyncRef's clone() and debug() allow data races

Affected versions of this crate unconditionally implement Sync for SyncRef. This definition allows data races if &T is accessible through &SyncRef. SyncRef derives Clone and Debug, and the default implementations of those traits access &T by invoking T::clone & T::fmt. It is possible to create da...

ButtplugFutureStateShared allows data race to (!Send|!Sync) objects

ButtplugFutureStateShared implements Send & Sync regardless of T. If T: !Send for ButtplugFutureStateShared, it is possible to move non-Send types across thread boundaries e.g. T=Rc and lead to undefined behavior. If T: !Sync for ButtplugFutureStateShared, it is possible to cause data race to T...

ShmWriter allows sending non-Send type across threads

Affected versions of this crate implement Send for ShmWriter without requiring H: Send. This allows users to send H: !Send to other threads, which can potentially lead to data races and undefined behavior...

PT-2020-17590

Name of the Vulnerable Software and Affected Versions buttplug crate versions prior to 1.0.4 Description The issue arises from ButtplugFutureStateShared not properly handling objects that do not implement Send or Sync, leading to potential data races and undefined behavior when moving non-Send...

PT-2020-17629

Name of the Vulnerable Software and Affected Versions kekbit crate versions prior to 0.3.4 Description The issue allows users to send H: !Send to other threads, which can potentially lead to data races and undefined behavior. This is because Send is implemented for ShmWriter without requiring H:...

PT-2020-17652

Name of the Vulnerable Software and Affected Versions distrustor crate through 2020-12-17 Description The issue arises from the RingBuffer type in the distrustor crate, which does not properly limit the number of mutable references. This is due to the non-atomic manner in which RingBuffer retriev...

ImageMagick6 -- multiple vulnerabilities

CVE reports: Several vulnerabilities have been discovered in ImageMagick: CVE-2021-20309: A flaw was found in ImageMagick in versions before 6.9.12, where a division by zero in WaveImage of MagickCore/visual-effects.c may trigger undefined behavior via a crafted image file submitted to an...

Imagemagick Studio ImageMagick Input Validation Error Vulnerability (CNVD-2021-25963)

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in ImageMagick versions prior to 7.0.9-0, which stems...

ImageMagick Digital Error Vulnerability (CNVD-2021-23804)

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in MagickCore versions prior to 7.0.8-68, which stems...

Imagemagick Studio ImageMagick Input Validation Error Vulnerability (CNVD-2021-23801)

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in versions of ImageMagick prior to 7.0.9-0, which...