CVE-2020-35906 - An issue was discovered in the futures-task crate before 0.3.6 for Rust

Back Back to CVE browser

HIGH

An issue was discovered in the futures-task crate before 0.3.6 for Rust

Published Dec 31, 2020

7.8

HIGH

CVSS 3.1

EPSS 0.50%

Description

An issue was discovered in the futures-task crate before 0.3.6 for Rust. futures_task::waker may cause a use-after-free in a non-static type situation.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-416

Use After Free

References (4)

https://github.com/advisories/GHSA-r93v-9p5q-vhpf
Advisory
https://github.com/rust-lang/futures-rs/pull/2206
https://nvd.nist.gov/vuln/detail/CVE-2020-35906
https://rustsec.org/advisories/RUSTSEC-2020-0060.html
x_refsource_MISCExploitPatchThird Party Advisory

Link	Providers	Tags
https://github.com/advisories/GHSA-r93v-9p5q-vhpf		Advisory
https://github.com/rust-lang/futures-rs/pull/2206
https://nvd.nist.gov/vuln/detail/CVE-2020-35906
https://rustsec.org/advisories/RUSTSEC-2020-0060.html		x_refsource_MISCExploitPatchThird Party Advisory