Skip to content

RUSTSEC-2026-0204: Invalid pointer dereference in fmt::Pointer impl for Atomic and Shared when the underlying pointer is invalid #1643

Description

@github-actions

Invalid pointer dereference in fmt::Pointer impl for Atomic and Shared when the underlying pointer is invalid

Details
Package crossbeam-epoch
Version 0.9.18
URL crossbeam-rs/crossbeam#1276
Date 2026-07-06
Patched versions >=0.9.20
Unaffected versions <0.9.0

Affected versions of fmt::Display dereference the underlying pointer. This causes a invalid pointer dereference e.g., when a pointer created with Atomic::null or Shared::null. fmt::Debug impls and pre-0.9 fmt::Display impls, which do not dereference pointers, are not affected by this issue.

See advisory page for additional details.

Metadata

Metadata

Assignees

Labels

lifecycle/confirmedBug is verified or proposal seems reasonable

Type

No type

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions