CVE-2020-36206

Name of the Vulnerable Software and Affected Versions rusb versions prior to 0.7.0

Description The issue is related to a lack of Send and Sync bounds in the rusb crate, which can lead to data races and memory corruption. This occurs because UsbContext types that are not thread-safe can be used concurrently through Device and DeviceHandle across threads.

Recommendations For versions prior to 0.7.0, update to version 0.7.0 or later, which includes the fix by adding Send and Sync bounds to UsbContext. As a temporary workaround, consider avoiding the use of UsbContexts across threads to minimize the risk of data races and memory corruption.