https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T00:13:19.117288+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-35874 CVE-2020-35874 2026-10-19T00:13:19.119033+00:00

An issue was discovered in the internment crate through 2020-05-28 for Rust. ArcIntern::drop has a race condition and resultant use-after-free.

 https://cve.radiocsirt.org/vuln/rustsec-2020-0017 RUSTSEC-2020-0017 — Use after free in ArcIntern::drop 2026-10-19T00:13:19.119079+00:00

Affected: crates.io: internment

`ArcIntern::drop` has a race condition where it can release memory which is about to get another user. The new user will get a reference to freed memory.

This was fixed by serializing access to an interned object while it is being deallocated.

Versions prior to 0.3.12 used stronger locking which avoided the problem.