Every CVE Search/ Get API key

CVE-2020-36468

Non-atomic writes in cgc

5.9 Medium

An issue was discovered in the cgc crate through 2020-12-10 for Rust. Ptr::write performs non-atomic write operations on an underlying pointer.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.98%Up 0.4 points since Aug 8, 2021
90%50%10%1%

What each source reports

NVD Score used 5.9

An issue was discovered in the cgc crate through 2020-12-10 for Rust. Ptr::write performs non-atomic write operations on an underlying pointer.

Record
CVE-2020-36468
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Updated
2026-11-02
CVE List No score

An issue was discovered in the cgc crate through 2020-12-10 for Rust. Ptr::write performs non-atomic write operations on an underlying pointer.

Record
CVE-2020-36468
Updated
2026-11-02
EUVDEUVD-2021-1830 No score

An issue was discovered in the cgc crate through 2020-12-10 for Rust. Ptr::write performs non-atomic write operations on an underlying pointer.

Record
EUVD-2021-1830
Updated
2026-11-03
GitHub AdvisoriesGHSA-pwhf-7427-9vv2 5.9

Non-atomic writes in cgc

Multiple soundness issues in Ptr in cgc

Affected versions of this crate have the following issues:

  1. Ptr implements Send and Sync for all types, this can lead to data races by sending non-thread safe types across threads.

  2. Ptr::get violates mutable alias rules by returning multiple mutable references to the same object.

  3. Ptr::write uses non-atomic writes to the underlying pointer. This means that when used across threads it can lead to data races.

Record
GHSA-pwhf-7427-9vv2
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-657
Updated
2026-11-02
OSVGHSA-f3mq-99jr-ww4r 5.9

Multiple soundness issues in cgc

Affected versions of this crate have the following issues:

  1. Ptr implements Send and Sync for all types, this can lead to data races by sending non-thread safe types across threads.

  2. Ptr::get violates mutable alias rules by returning multiple mutable references to the same object.

  3. Ptr::write uses non-atomic writes to the underlying pointer. This means that when used across threads it can lead to data races.

Record
GHSA-f3mq-99jr-ww4r
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-657
Updated
2026-11-02
OSVGHSA-f9xr-3m55-5q2v 5.9

Data races in cgc

An issue was discovered in the cgc crate through 2020-12-10 for Rust. Ptr implements Send and Sync for all types

Record
GHSA-f9xr-3m55-5q2v
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-362
Updated
2026-11-02
OSVGHSA-pwhf-7427-9vv2 5.9

Non-atomic writes in cgc

Multiple soundness issues in Ptr in cgc

Affected versions of this crate have the following issues:

  1. Ptr implements Send and Sync for all types, this can lead to data races by sending non-thread safe types across threads.

  2. Ptr::get violates mutable alias rules by returning multiple mutable references to the same object.

  3. Ptr::write uses non-atomic writes to the underlying pointer. This means that when used across threads it can lead to data races.

Record
GHSA-pwhf-7427-9vv2
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-657
Updated
2026-11-02
OSVRUSTSEC-2020-0148 5.9

Multiple soundness issues in `Ptr`

Affected versions of this crate have the following issues:

  1. Ptr implements Send and Sync for all types, this can lead to data races by sending non-thread safe types across threads.

  2. Ptr::get violates mutable alias rules by returning multiple mutable references to the same object.

  3. Ptr::write uses non-atomic writes to the underlying pointer. This means that when used across threads it can lead to data races.

Record
RUSTSEC-2020-0148
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
cgc
crates.io
 through 0.4.0 None known
cgc
crates.io
From an advisory covering 3 CVEs
 through 0.4.0 None known
cgc
crates.io
From an advisory covering 3 CVEs
 0.0.0-0 and later None known

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-36468 is a medium vulnerability (CVSS 5.9) in Cgc Project Cgc, published December 10, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.98%, the 62nd percentile. No source names a fixed version.

References

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open