CVSS 3.1
7.0 highCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2020-36206
High (7.0) in rusb project rusb. EPSS 0.3% chance of exploitation in the next 30 days. Fixed in rusb 0.7.0.
An issue was discovered in the rusb crate before 0.7.0 for Rust. Because of a lack of Send and Sync bounds, a data race and memory corruption can occur.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 21% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-662, CWE-787
- Published
- Modified
- Record from
- the NVD, synced
Affected
- rusb_project:rusb
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-9mxw-4856-9cm5 | crates.io | rusb | <0.7.0 | 0.7.0 |
| RUSTSEC-2020-0098 | crates.io | rusb | >=0.0.0-0 <0.7.0 | 0.7.0 |