CVE-2020-36215

Name of the Vulnerable Software and Affected Versions hashconsing versions prior to 1.1.0

Description The issue arises from the hashconsing crate's implementation of Send and Sync traits for its HConsed type without proper restrictions. This allows non-Sync types, such as Cell, to be shared across threads, leading to undefined behavior and memory corruption in concurrent programs.

Recommendations For versions prior to 1.1.0, update to version 1.1.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of the HConsed type to only Sendable and Syncable types to minimize the risk of exploitation. Avoid sharing non-Sync types, such as Cell, across threads until the issue is resolved.