Skip to content
OpenAdvisories
Unscored RUSTSEC-2026-0204

Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid

Published Jul 6, 2026 · Updated Jul 6, 2026 · Assigned by RUSTSEC

Description

Affected versions of `fmt::Display` dereference the underlying pointer. This causes a invalid pointer dereference e.g., when a pointer created with `Atomic::null` or `Shared::null`. `fmt::Debug` impls and pre-0.9 `fmt::Display` impls, which do not dereference pointers, are not affected by this issue.

Affected packages

EcosystemPackageAffectedFixedRecord
crates.io crossbeam-epoch >= 0.9.0, < 0.9.20 0.9.20 RUSTSEC-2026-0204

References