CVE-2020-35860: Cbox Project Cbox

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

An issue was discovered in the cbox crate through 2020-03-19 for Rust. The CBox API allows dereferencing raw pointers without a requirement for unsafe code.

Affected products

• Cbox Project Cbox: up to and including 0.3.0

Published 2020-12-31. Last modified 2026-06-17.