https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T18:57:59.366227+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-36206 CVE-2020-36206 2026-10-12T18:57:59.398991+00:00

An issue was discovered in the rusb crate before 0.7.0 for Rust. Because of a lack of Send and Sync bounds, a data race and memory corruption can occur.

 https://cve.radiocsirt.org/vuln/rustsec-2020-0098 RUSTSEC-2020-0098 — UsbContext trait did not require implementers to be Send and Sync. 2026-10-12T18:57:59.399037+00:00

Affected: crates.io: rusb

Affected versions of `rusb` did not require `UsbContext` to implement `Send` and `Sync`. However, through `Device` and `DeviceHandle` it is possible to use `UsbContext`s across threads.

This issue allows non-thread safe `UsbContext` types to be used concurrently leading to data races and memory corruption.

The issue was fixed by adding `Send` and `Sync` bounds to `UsbContext`.