GHSA-96w3-p368-4h8cHighCVSS 8.1

Use after free in internment

Published
August 25, 2021
Last Modified
June 13, 2023

🔗 CVE IDs covered (1)

CVE-2020-35874 →

📋 Description

ArcIntern::drop has a race condition where it can release memory which is about to get another user. The new user will get a reference to freed memory.

This was fixed by serializing access to an interned object while it is being deallocated.

Versions prior to 0.3.12 used stronger locking which avoided the problem.

🎯 Affected products1

  • rust/internment:>= 0.3.12, < 0.4.0

🔗 References (4)