CVE-2020-36217

Name of the Vulnerable Software and Affected Versions may queue versions through 2020-11-10

Description An issue in the may queue crate for Rust can cause memory corruption due to the lack of bounds on its Send trait or Sync trait. This allows non-Sync types, such as Cell, to be shared across threads, leading to undefined behavior and memory corruption in concurrent programs.

Recommendations For may queue versions through 2020-11-10, consider restricting the Queue type to only Sendable and Syncable types to prevent memory corruption. As a temporary workaround, avoid using the Queue type with non-Sync types, such as Cell, in concurrent programs until a patch is available.