CVE-2020-36462

Name of the Vulnerable Software and Affected Versions syncpool crate versions prior to 0.1.6

Description An issue in the syncpool crate allows sending non-Send types to other threads, leading to data races when non-Send types like Cell<T> or Rc<T> are contained inside Bucket2 and sent across thread boundaries. This can potentially lead to memory corruption. The flaw was corrected by adding a T: Send bound to the Send impl of Bucket2<T>.

Recommendations For versions prior to 0.1.6, update to version 0.1.6 or later to resolve the issue. As a temporary workaround, consider avoiding the use of non-Send types like Cell<T> or Rc<T> inside Bucket2 to minimize the risk of data races and memory corruption.