RUSTSEC-2026-0204

ADVISORY - rustsec

Summary

Affected versions of fmt::Display dereference the underlying pointer. This causes a invalid pointer dereference e.g., when a pointer created with Atomic::null or Shared::null. fmt::Debug impls and pre-0.9 fmt::Display impls, which do not dereference pointers, are not affected by this issue.

Common Weakness Enumeration (CWE)

Impacted images

Advisories

RustSec

CREATED

13 hours ago

UPDATED

3 hours ago

ADVISORY IDRUSTSEC-2026-0204⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Package	Type	OS Name	OS Version	Affected Ranges	Fix Versions
crossbeam-epoch	cargo	-	-	>=0.9.0,<0.9.20	0.9.20

Severity and metrics

No CVSS data available from this advisory.