Approved changes feed: RSS · Atom

cpe:2.3:a:crossbeam_project:crossbeam:*:*:*:*:*:rust:*:*

part: a version: * update: *

VendorCrossbeam Project (f89ab3d0-3b38-59b6-95f4-2afbd77469fc)
ProductCrossbeam (fac6cee1-7bbd-5827-85bb-583d0a0f0a0d)
Edition*
Language*
Software edition*
Target softwarerust
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-23639 vulnerable 2026-06-08 05:40:58.093790 Improper Restriction of Operations within the Bounds of a Memory Buffer and Race Condition in crossbeam-utils
HIGH (8.1)
crossbeam-utils provides atomics, synchronization primitives, scoped threads, and other utilities for concurrent programming in Rust. crossbeam-utils prior to version 0.8.7 incorrectly assumed that the alignment of `{i,u}64` was always the same as `Atomic{I,U}64`. However, the alignment of `{i,u}64` on a 32-bit target can be smaller than `Atomic{I,U}64`. This can cause unaligned memory accesses and data race. Crates using `fetch_*` methods with `AtomicCell<{i,u}64>` are affected by this issue. 32-bit targets without `Atomic{I,U}64` and 64-bit targets are not affected by this issue. This has been fixed in crossbeam-utils 0.8.7. There are currently no known workarounds.
Published: 2022-02-15T18:20:10.000Z
Updated: 2025-04-22T18:22:02.437Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.