Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
/v2.16.8 - https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0 - https://bugs.gentoo.org/740108 - https://github.com/ARMmbed/mbedtls/pull/3433 - https://github.com/ARMmbed/mbedtls/issues/3340 - https://lists.debian.org/debian-lts-announce/2022/12/msg00036.html
CVE ID: CVE-2020-36426 State: PUBLISHED Published: 2021-07-19T00:00:00 Last Updated: 2024-08-04T17:30:07.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Arm Mbed TLS before 2.24.0. mbedtls_x509_crl_parse_der has a buffer over-read (of one byte). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ARMmbed/mbedtls/releases/tag/v2.7.17 - https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.8 - https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0 - https://bugs.gentoo.org/740108 - https://lists.debian.org/debian-lts-announce/2022/12/msg00036.html
CVE ID: CVE-2020-36427 State: PUBLISHED Published: 2021-07-19T15:20:01 Last Updated: 2024-08-04T17:30:07.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNOME gThumb before 3.10.1 allows an application crash via a malformed JPEG image. Additional Analyst Notes: - CVE Program Container: References: - https://download.gnome.org/sources/gthumb/3.10/gthumb-3.10.1.news - https://mail.gnome.org/archives/gthumb-list/2020-September/msg00001.html
CVE ID: CVE-2020-36428 State: PUBLISHED Published: 2021-07-20T06:47:45 Last Updated: 2024-08-04T17:30:08.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: matio (aka MAT File I/O Library) 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble (called from ReadInt32Data and Mat_VarRead4). Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21421 - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/matio/OSV-2020-799.yaml
CVE ID: CVE-2020-36429 State: PUBLISHED Published: 2021-07-20T06:47:30 Last Updated: 2024-08-04T17:30:07.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Variant_encodeJson in open62541 1.x before 1.0.4 has an out-of-bounds write for a large recursion depth. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/open62541/OSV-2020-153.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20578 - https://github.com/open62541/open62541/commit/c800e2987b10bb3af6ef644b515b5d6392f8861d - https://github.com/open62541/open62541/compare/v1.0.3...v1.0.4
CVE ID: CVE-2020-36430 State: PUBLISHED Published: 2021-07-20T06:47:14 Last Updated: 2024-08-04T17:30:08.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and process_text) because the wrong integer data type is used for subtraction. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libass/OSV-2020-2099.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26674 - https://github.com/libass/libass/commit/017137471d0043e0321e377ed8da48e45a3ec632 - https://lists.fedoraproject.org/archives/list/package-a
/libass/libass/commit/017137471d0043e0321e377ed8da48e45a3ec632 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6JUXFQUJ32GWG5E46A63DFDCYJAF3VU6/ - https://security.gentoo.org/glsa/202208-13
CVE ID: CVE-2020-36431 State: PUBLISHED Published: 2021-07-20T06:46:56 Last Updated: 2024-08-04T17:30:07.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unicorn Engine 1.0.2 has an out-of-bounds write in helper_wfe_arm. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/unicorn/OSV-2020-837.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20245
CVE ID: CVE-2020-36432 State: PUBLISHED Published: 2021-08-08T05:19:47 Last Updated: 2024-08-04T17:30:07.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the alg_ds crate through 2020-08-25 for Rust. There is a drop of uninitialized memory in Matrix::new(). Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0033.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/alg_ds/RUSTSEC-2020-0033.md
CVE ID: CVE-2020-36433 State: PUBLISHED Published: 2021-08-08T05:19:34 Last Updated: 2024-08-04T17:30:08.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the chunky crate through 2020-08-25 for Rust. The Chunk API does not honor an alignment requirement. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0035.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/chunky/RUSTSEC-2020-0035.md
CVE ID: CVE-2020-36434 State: PUBLISHED Published: 2021-08-08T05:19:21 Last Updated: 2024-08-04T17:30:08.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the sys-info crate before 0.8.0 for Rust. sys_info::disk_info calls can trigger a double free. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0100.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/sys-info/RUSTSEC-2020-0100.md
CVE ID: CVE-2020-36435 State: PUBLISHED Published: 2021-08-08T05:19:07 Last Updated: 2024-08-04T17:30:07.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the ruspiro-singleton crate before 0.4.1 for Rust. In Singleton, Send and Sync do not have bounds checks. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0115.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/ruspiro-singleton/RUSTSEC-2020-0115.md
CVE ID: CVE-2020-36436 State: PUBLISHED Published: 2021-08-08T05:18:56 Last Updated: 2024-08-04T17:30:08.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the unicycle crate before 0.7.1 for Rust. PinSlab<T> and Unordered<T, S> do not have bounds on their Send and Sync traits. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0116.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/unicycle/RUSTSEC-2020-0116.md
CVE ID: CVE-2020-36437 State: PUBLISHED Published: 2021-08-08T05:18:44 Last Updated: 2024-08-04T17:30:07.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the conqueue crate before 0.4.0 for Rust. There are unconditional implementations of Send and Sync for QueueSender<T>. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0117.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/conqueue/RUSTSEC-2020-0117.md
CVE ID: CVE-2020-36438 State: PUBLISHED Published: 2021-08-08T05:18:32 Last Updated: 2024-08-04T17:30:08.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the tiny_future crate before 0.4.0 for Rust. Future<T> does not have bounds on its Send and Sync traits. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0118.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/tiny_future/RUSTSEC-2020-0118.md
CVE ID: CVE-2020-36439 State: PUBLISHED Published: 2021-08-08T05:18:19 Last Updated: 2024-08-04T17:30:07.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the ticketed_lock crate before 0.3.0 for Rust. There are unconditional implementations of Send for ReadTicket<T> and WriteTicket<T>. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0119.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/ticketed_lock/RUSTSEC-2020-0119.md
CVE ID: CVE-2020-36440 State: PUBLISHED Published: 2021-08-08T05:18:08 Last Updated: 2024-08-04T17:30:07.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the libsbc crate before 0.1.5 for Rust. For Decoder<R>, it implements Send for any R: Read. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0120.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/libsbc/RUSTSEC-2020-0120.md
CVE ID: CVE-2020-36441 State: PUBLISHED Published: 2021-08-08T05:17:56 Last Updated: 2024-08-04T17:30:08.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the abox crate before 0.4.1 for Rust. It implements Send and Sync for AtomicBox<T> with no requirement for T: Send and T: Sync. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0121.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/abox/RUSTSEC-2020-0121.md
CVE ID: CVE-2020-36442 State: PUBLISHED Published: 2021-08-08T05:17:36 Last Updated: 2024-08-04T17:30:08.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the beef crate before 0.5.0 for Rust. beef::Cow has no Sync bound on its Send trait. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0122.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/beef/RUSTSEC-2020-0122.md
CVE ID: CVE-2020-36443 State: PUBLISHED Published: 2021-08-08T05:17:25 Last Updated: 2024-08-04T17:30:07.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the libp2p-deflate crate before 0.27.1 for Rust. An uninitialized buffer is passed to AsyncRead::poll_read(), which is a user-provided trait function. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0123.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/libp2p-deflate/RUSTSEC-2020-0123.md
CVE ID: CVE-2020-36444 State: PUBLISHED Published: 2021-08-08T05:17:13 Last Updated: 2024-08-04T17:30:07.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the async-coap crate through 2020-12-08 for Rust. Send and Sync are implemented for ArcGuard<RC, T> without trait bounds on RC. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0124.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/async-coap/RUSTSEC-2020-0124.md
CVE ID: CVE-2020-36445 State: PUBLISHED Published: 2021-08-08T05:17:02 Last Updated: 2024-08-04T17:30:07.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the convec crate through 2020-11-24 for Rust. There are unconditional implementations of Send and Sync for ConVec<T>. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0125.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/convec/RUSTSEC-2020-0125.md
CVE ID: CVE-2020-36446 State: PUBLISHED Published: 2021-08-08T05:16:50 Last Updated: 2024-08-04T17:30:08.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the signal-simple crate through 2020-11-15 for Rust. There are unconditional implementations of Send and Sync for SyncChannel<T>. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0126.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/signal-simple/RUSTSEC-2020-0126.md
CVE ID: CVE-2020-36447 State: PUBLISHED Published: 2021-08-08T05:16:37 Last Updated: 2024-08-04T17:30:08.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the v9 crate through 2020-12-18 for Rust. There is an unconditional implementation of Sync for SyncRef<T>. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0127.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/v9/RUSTSEC-2020-0127.md
CVE ID: CVE-2020-36448 State: PUBLISHED Published: 2021-08-08T05:16:23 Last Updated: 2024-08-04T17:30:08.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the cache crate through 2020-11-24 for Rust. There are unconditional implementations of Send and Sync for Cache<K>. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0128.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/cache/RUSTSEC-2020-0128.md
CVE ID: CVE-2020-36449 State: PUBLISHED Published: 2021-08-08T05:15:47 Last Updated: 2024-08-04T17:30:08.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the kekbit crate before 0.3.4 for Rust. For ShmWriter<H>, Send is implemented without requiring H: Send. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0129.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/kekbit/RUSTSEC-2020-0129.md
CVE ID: CVE-2020-36450 State: PUBLISHED Published: 2021-08-08T05:15:34 Last Updated: 2024-08-04T17:30:08.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the bunch crate through 2020-11-12 for Rust. There are unconditional implementations of Send and Sync for Bunch<T>. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0130.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/bunch/RUSTSEC-2020-0130.md
CVE ID: CVE-2020-36451 State: PUBLISHED Published: 2021-08-08T05:15:22 Last Updated: 2024-08-04T17:30:07.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the rcu_cell crate through 2020-11-14 for Rust. There are unconditional implementations of Send and Sync for RcuCell<T>. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0131.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/rcu_cell/RUSTSEC-2020-0131.md
CVE ID: CVE-2020-36452 State: PUBLISHED Published: 2021-08-08T05:15:12 Last Updated: 2024-08-04T17:30:07.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the array-tools crate before 0.3.2 for Rust. FixedCapacityDequeLike::clone() has a drop of uninitialized memory. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0132.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/array-tools/RUSTSEC-2020-0132.md
CVE ID: CVE-2020-36453 State: PUBLISHED Published: 2021-08-08T05:15:02 Last Updated: 2024-08-04T17:30:07.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the scottqueue crate through 2020-11-15 for Rust. There are unconditional implementations of Send and Sync for Queue<T>. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0133.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/scottqueue/RUSTSEC-2020-0133.md
CVE ID: CVE-2020-36454 State: PUBLISHED Published: 2021-08-08T05:14:51 Last Updated: 2024-08-04T17:30:08.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the parc crate through 2020-11-14 for Rust. LockWeak<T> has an unconditional implementation of Send without trait bounds on T. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0134.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/parc/RUSTSEC-2020-0134.md
CVE ID: CVE-2020-36455 State: PUBLISHED Published: 2021-08-08T05:14:41 Last Updated: 2024-08-04T17:30:07.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the slock crate through 2020-11-17 for Rust. Slock<T> unconditionally implements Send and Sync. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0135.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/slock/RUSTSEC-2020-0135.md
CVE ID: CVE-2020-36456 State: PUBLISHED Published: 2021-08-08T05:14:31 Last Updated: 2024-08-04T17:30:07.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the toolshed crate through 2020-11-15 for Rust. In CopyCell<T>, the Send trait lacks bounds on the contained type. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0136.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/toolshed/RUSTSEC-2020-0136.md
CVE ID: CVE-2020-36457 State: PUBLISHED Published: 2021-08-08T05:14:20 Last Updated: 2024-08-04T17:30:08.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the lever crate before 0.1.1 for Rust. AtomicBox<T> implements the Send and Sync traits for all types T. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0137.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/lever/RUSTSEC-2020-0137.md
CVE ID: CVE-2020-36458 State: PUBLISHED Published: 2021-08-08T05:14:09 Last Updated: 2024-08-04T17:30:07.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the lexer crate through 2020-11-10 for Rust. For ReaderResult<T, E>, there is an implementation of Sync with a trait bound of T: Send, E: Send. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0138.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/lexer/RUSTSEC-2020-0138.md
CVE ID: CVE-2020-36459 State: PUBLISHED Published: 2021-08-08T05:13:55 Last Updated: 2024-08-04T17:30:07.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the dces crate through 2020-12-09 for Rust. The World type is marked as Send but lacks bounds on its EntityStore and ComponentStore. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0139.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/dces/RUSTSEC-2020-0139.md
CVE ID: CVE-2020-36460 State: PUBLISHED Published: 2021-08-08T05:13:44 Last Updated: 2024-08-04T17:30:08.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the model crate through 2020-11-10 for Rust. The Shared data structure has an implementation of the Send and Sync traits without regard for the inner type. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0140.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/model/RUSTSEC-2020-0140.md
CVE ID: CVE-2020-36461 State: PUBLISHED Published: 2021-08-08T05:13:33 Last Updated: 2024-08-04T17:30:08.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the noise_search crate through 2020-12-10 for Rust. There are unconditional implementations of Send and Sync for MvccRwLock. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0141.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/noise_search/RUSTSEC-2020-0141.md
CVE ID: CVE-2020-36462 State: PUBLISHED Published: 2021-08-08T05:13:09 Last Updated: 2024-08-04T17:30:08.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the syncpool crate before 0.1.6 for Rust. There is an unconditional implementation of Send for Bucket2. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0142.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/syncpool/RUSTSEC-2020-0142.md
CVE ID: CVE-2020-36463 State: PUBLISHED Published: 2021-08-08T05:12:58 Last Updated: 2024-08-04T17:30:08.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the multiqueue crate through 2020-12-25 for Rust. There are unconditional implementations of Send for InnerSend<RW, T>, InnerRecv<RW, T>, FutInnerSend<RW, T>, and FutInnerRecv<RW, T>. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0143.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/multiqueue/RUSTSEC-2020-0143.md
CVE ID: CVE-2020-36464 State: PUBLISHED Published: 2021-08-08T05:12:46 Last Updated: 2024-08-04T17:30:08.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the heapless crate before 0.6.1 for Rust. The IntoIter Clone implementation clones an entire underlying Vec without considering whether it has already been partially consumed. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0145.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/heapless/RUSTSEC-2020-0145.md
CVE ID: CVE-2020-36465 State: PUBLISHED Published: 2021-08-08T05:12:33 Last Updated: 2024-08-04T17:30:07.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the generic-array crate before 0.13.3 for Rust. It violates soundness by using the arr! macro to extend lifetimes. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0146.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/generic-array/RUSTSEC-2020-0146.md
CVE ID: CVE-2020-36466 State: PUBLISHED Published: 2021-08-08T05:12:22 Last Updated: 2024-08-04T17:30:08.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the cgc crate through 2020-12-10 for Rust. Ptr implements Send and Sync for all types. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0148.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/cgc/RUSTSEC-2020-0148.md
CVE ID: CVE-2020-36467 State: PUBLISHED Published: 2021-08-08T05:12:12 Last Updated: 2024-08-04T17:30:08.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the cgc crate through 2020-12-10 for Rust. Ptr::get returns more than one mutable reference to the same object. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0148.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/cgc/RUSTSEC-2020-0148.md
CVE ID: CVE-2020-36468 State: PUBLISHED Published: 2021-08-08T05:12:00 Last Updated: 2024-08-04T17:30:08.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the cgc crate through 2020-12-10 for Rust. Ptr::write performs non-atomic write operations on an underlying pointer. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0148.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/cgc/RUSTSEC-2020-0148.md
CVE ID: CVE-2020-36469 State: PUBLISHED Published: 2021-08-08T05:11:49 Last Updated: 2024-08-04T17:30:07.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the appendix crate through 2020-11-15 for Rust. For the generic K and V type parameters, Send and Sync are implemented unconditionally. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0149.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/appendix/RUSTSEC-2020-0149.md