Executive brief
Use after free in ArcIntern::drop
Affected products
- crates.io internment
Junglewise Threat Intelligence
CVE-2020-35874: RUSTSEC-2020-0017 - Use after free in ArcIntern::drop
CVE-2020-35874 · Severity: low · CVSS 3.1 · Published 2020-05-28
Technologies: internment (crates.io). Vendors: crates.io.
Related threats
- arrayref crate malicious dependency code execution at build time
- append-only-vec crate malicious build script supply chain attack
- internment Rust crate malicious dependency injection
- RUSTSEC-2026-0266 - `internment` 0.8.7 was removed from crates.io due to a malicious dependency
- RUSTSEC-2021-0036 - Intern<T>: Data race allowed on T