CVE-2020-35876: Rio Project Rio

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

An issue was discovered in the rio crate through 2020-05-11 for Rust. A struct can be leaked, allowing attackers to obtain sensitive information, cause a use-after-free, or cause a data race.

Affected products

• Rio Project Rio: up to and including 0.9.3

Published 2020-12-31. Last modified 2026-06-17.