cve.bz

CVE-2025-4574

6.5 mediumEPSS 0.6%

Medium (6.5). EPSS 0.6% chance of exploitation in the next 30 days. Fixed in crossbeam-channel 0.5.15.

In crossbeam-channel rust crate, the internal `Channel` type's `Drop` method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption.

Severity

CVSS 3.1

6.5 medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
EPSS
0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWE
CWE-415
Published
Modified
Record from
the NVD, synced

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-pg9f-39pc-qf8gcrates.iocrossbeam-channel>=0.5.12 <0.5.150.5.15
RUSTSEC-2025-0024crates.iocrossbeam-channel>=0.5.12-0 <0.5.150.5.15

References

Check your stackJSON