CVE-2020-35860

Name of the Vulnerable Software and Affected Versions cbox crate through 2020-03-19

Description An issue was discovered in the cbox crate, where the CBox API allows dereferencing raw pointers without requiring unsafe code. The CBox and CSemiBox components, part of the public API, enable creating smart pointers from raw pointers and dereferencing them without the need for unsafe code.

Recommendations For versions of the cbox crate through 2020-03-19, consider restricting the use of CBox and CSemiBox until a patch is available, as they allow dereferencing raw pointers without the need for unsafe code. At the moment, there is no information about a newer version that contains a fix for this issue.