CVE-2020-36440

Name of the Vulnerable Software and Affected Versions libsbc crate versions prior to 0.1.5

Description The issue allows Decoder<R> to contain R: !Send and carry it to another thread, resulting in undefined behavior such as memory corruption from data race on R, or dropping R = MutexGuard< > from a thread that didn't lock the mutex.

Recommendations For versions prior to 0.1.5, update to version 0.1.5 or later to resolve the issue. As a temporary workaround, consider adding a trait bound R: Send to the Send impl for Decoder<R> to prevent Decoder<R> from containing R: !Send.