CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2020-36215
High (7.5) in hashconsing project hashconsing. EPSS 1.4% chance of exploitation in the next 30 days. Fixed in hashconsing 1.1.0.
An issue was discovered in the hashconsing crate before 1.1.0 for Rust. Because HConsed does not have bounds on its Send trait or Sync trait, memory corruption can occur.
Severity
- EPSS
- 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-662, CWE-787
- Published
- Modified
- Record from
- the NVD, synced
Affected
- hashconsing_project:hashconsing
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-rw2c-c256-3r53 | crates.io | hashconsing | <1.1.0 | 1.1.0 |
| RUSTSEC-2020-0107 | crates.io | hashconsing | >=0.0.0-0 <1.1.0 | 1.1.0 |