Related Vulnerabilities: CVE-2021-32810  

In the crossbeam crate, one or more tasks in the worker queue could have been be popped twice instead of other tasks that are forgotten and never popped. If tasks are allocated on the heap, this could have caused a double free and a memory leak.

Severity Medium

Remote Yes

Type Information disclosure

Description

In the crossbeam crate, one or more tasks in the worker queue could have been be popped twice instead of other tasks that are forgotten and never popped. If tasks are allocated on the heap, this could have caused a double free and a memory leak.

AVG-2443 firefox 92.0.1-1 93.0-1 High Testing

https://www.mozilla.org/security/advisories/mfsa2021-43/
https://bugzilla.mozilla.org/show_bug.cgi?id=1729813
https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw