—
RUSTSEC-2026-0204
Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid
Details
Affected versions of `fmt::Display` dereference the underlying pointer. This causes a invalid pointer dereference e.g., when a pointer created with `Atomic::null` or `Shared::null`. `fmt::Debug` impls and pre-0.9 `fmt::Display` impls, which do not dereference pointers, are not affected by this issue.
Are you affected?
Enter the version of the package you're using.
Affected packages
crates.io / crossbeam-epoch
Introduced in:
0.9.0 Fixed in: 0.9.20 Upgrade crossbeam-epoch to 0.9.20 or newer (ecosystem crates.io).