Skip to content
OpenAdvisories

Package · crates.io

crossbeam

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium —
    GHSA-8gj8-hv75-gp94

    `SegQueue` creates zero value of any type

    Affected versions of this crate called `mem::zeroed()` to create values of a user-supplied type `T`. This is unsound e.g. if `T` is a reference type (which must be non-null). The flaw was corrected by avoiding the use of `mem::zeroed()`, using `MaybeUninit` i…

    crossbeam crates.io
  • Medium —
    GHSA-rwf4-gx62-rqfw

    `MsQueue` `push`/`pop` use the wrong orderings

    Affected versions of this crate use orderings which are too weak to support this data structure. It is likely this has caused memory corruption in the wild: <https://github.com/crossbeam-rs/crossbeam/issues/97#issuecomment-412785919>.

    crossbeam crates.io