rustsec-2026-0204

{
  "aliases": [],
  "categories": [],
  "crate": "crossbeam-epoch",
  "cves": [],
  "cvss": 0.0,
  "database_specific": {
    "severity": ""
  },
  "date": "2026-07-06",
  "deb_packages": [
    {
      "crate_name": null,
      "deb_name": "loggerhead",
      "version": "3.0.1+dfsg-2+b2"
    },
    {
      "crate_name": null,
      "deb_name": "sdml",
      "version": "0.3.2+20250310-7+b1"
    }
  ],
  "description": "Affected versions of `fmt::Display` dereference the underlying pointer. This causes a invalid pointer dereference e.g., when a pointer created with `Atomic::null` or `Shared::null`. `fmt::Debug` impls and pre-0.9 `fmt::Display` impls, which do not dereference pointers, are not affected by this issue.",
  "id": "RUSTSEC-2026-0204",
  "keywords": [
    "NULL-pointer-dereference"
  ],
  "patched_versions": [
    ">=0.9.20"
  ],
  "source": "debian_rustsec",
  "title": "Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid",
  "url": "https://github.com/crossbeam-rs/crossbeam/pull/1276"
}