Most recent entries from all

cnvd-2021-71650

EUVD-2026-48037

fkie_cve-2020-36206

An issue was discovered in the rusb crate before 0.7.0 for Rust. Because of a lack of Send and Sync bounds, a data race and memory corruption can occur.

GHSA-9mxw-4856-9cm5 — Data races in rusb

Affected: crates.io: rusb

Affected versions of rusb did not require UsbContext to implement Send and Sync. However, through Device and DeviceHandle it is possible to use UsbContexts across threads. This issue allows non-thread safe UsbContext types to be used concurrently leading to data races and memory corruption. The issue was fixed by adding Send and Sync bounds to UsbContext.

gsd-2020-36206

RUSTSEC-2020-0098 — UsbContext trait did not require implementers to be Send and Sync.

Affected: crates.io: rusb

Affected versions of `rusb` did not require `UsbContext` to implement `Send` and `Sync`. However, through `Device` and `DeviceHandle` it is possible to use `UsbContext`s across threads.

This issue allows non-thread safe `UsbContext` types to be used concurrently leading to data races and memory corruption.

The issue was fixed by adding `Send` and `Sync` bounds to `UsbContext`.