Every CVESearch/Get API key

GHSA-rwf4-gx62-rqfw

`MsQueue` `push`/`pop` use the wrong orderings

No scoreFix available

GHSA-rwf4-gx62-rqfw is a vulnerability with no CVSS score yet in crossbeam, published June 7, 2022. No source lists public exploit code. Fixed in crossbeam 0.3.0.

What does this mean?
Severity
UnratedNo CVSS score yet
Exploit chance
UnscoredNo EPSS score yet
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
0.3.0crossbeam +1 more

Description

Affected versions of this crate use orderings which are too weak to support this data structure. It is likely this has caused memory corruption in the wild: https://github.com/crossbeam-rs/crossbeam/issues/97#issuecomment-412785919.

Affected packages

Affected packages
PackageAffectedFixed
crossbeam
crates.io
before 0.3.0
0.3.0
crossbeam
crates.io
0.0.0-0 up to 0.3.0
0.3.0

What each source reports

GitHub AdvisoriesNo score

`MsQueue` `push`/`pop` use the wrong orderings

Affected versions of this crate use orderings which are too weak to support this data structure. It is likely this has caused memory corruption in the wild: https://github.com/crossbeam-rs/crossbeam/issues/97#issuecomment-412785919.

Record
GHSA-rwf4-gx62-rqfw
Updated
2026-11-02
OSVNo score

`MsQueue` `push`/`pop` use the wrong orderings

Affected versions of this crate use orderings which are too weak to support this data structure. It is likely this has caused memory corruption in the wild: https://github.com/crossbeam-rs/crossbeam/issues/97#issuecomment-412785919.

Record
GHSA-rwf4-gx62-rqfw
Updated
2026-11-02
OSVRUSTSEC-2022-0029No score

`MsQueue` `push`/`pop` use the wrong orderings

Affected versions of this crate use orderings which are too weak to support this data structure. It is likely this has caused memory corruption in the wild: https://github.com/crossbeam-rs/crossbeam/issues/97#issuecomment-412785919.

Record
RUSTSEC-2022-0029
Updated
2026-11-02

History

History
RecordedChangedSources
first indexedGitHub Advisories, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open