CVE-2020-36206

HIGH 7.0CVE-2020-36206 · Published 26/01/2021 · updated 17/06/2026

In short

CVE-2020-36206 is a HIGH (CVSS 7.0) vulnerability affecting rusb (rusb project).
Chance of exploitation in the next 30 days (EPSS): 0.29%, higher than 21.6% of all vulnerabilities.
Fix: update to 0.7.0 or later.

Package	Affected versions	Patched versions
rusb rusb_project	`< 0.7.0`	`0.7.0`

Description

An issue was discovered in the rusb crate before 0.7.0 for Rust. Because of a lack of Send and Sync bounds, a data race and memory corruption can occur.

References

rustsec.org/advisories/RUSTSEC-2020-0098.html · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free