CVE-2020-35906

Name of the Vulnerable Software and Affected Versions futures-task crate versions prior to 0.3.6

Description An issue in the futures-task crate may cause a use-after-free in certain situations. The problem arises when the Waker::wake() function is called after the original data has been dropped, due to a missing 'static lifetime bound on the waker function.

Recommendations For versions prior to 0.3.6, update to version 0.3.6 or later to resolve the issue by adding a 'static lifetime bound to the data waker takes.