MEDIUM5.9

GHSA-r7rv-2rph-hvhj

Improper synchronization in buttplug

Details

An issue was discovered in the buttplug crate before 1.0.4 for Rust. ButtplugFutureStateShared does not properly consider (!Send|!Sync) objects, leading to a data race.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/buttplug

Introduced in: 0Fixed in: 1.0.4

Upgrade buttplug to 1.0.4 or newer (ecosystem crates.io).

References

https://nvd.nist.gov/vuln/detail/CVE-2020-36218[ADVISORY]
https://github.com/buttplugio/buttplug-rs/issues/225[WEB]
https://github.com/buttplugio/buttplug-rs[PACKAGE]
https://rustsec.org/advisories/RUSTSEC-2020-0112.html[WEB]