CVE-2020-35859: Lucet-Runtime-Internals Project Lucet-Runtime-Internals

Critical severity, CVSS 9.1. EPSS: 1.5% chance of exploitation in the next 30 days.

An issue was discovered in the lucet-runtime-internals crate before 0.5.1 for Rust. It mishandles sigstack allocation. Guest programs may be able to obtain sensitive information, or guest programs can experience memory corruption.

Affected products

• Lucet-Runtime-Internals Project Lucet-Runtime-Internals: before 0.5.1 (fixed in 0.5.1)

Published 2020-12-31. Last modified 2026-06-17.