medium5.5
CVE-2020-35907
futures_task::noop_waker_ref can segfault due to dereferencing a NULL pointer
Impact
Affected versions of the crate used a UnsafeCell in thread-local storage to return a noop waker reference, assuming that the reference would never be returned from another thread. This resulted in a segmentation fault crash if Waker::wake_by_ref() was called on a waker returned from another thread due to it attempting to dereference a pointer that wasn't accessible from the main thread.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| rust | futures-task | < 0.3.5 | 0.3.5 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rust-Lang | Futures-Task | before 0.3.5 |