CVE-2020-35904: Crossbeam-Channel Project Crossbeam-Channel

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue was discovered in the crossbeam-channel crate before 0.4.4 for Rust. It has incorrect expectations about the relationship between the memory allocation and how many iterator elements there are.

Affected products

• Crossbeam-Channel Project Crossbeam-Channel: before 0.4.4 (fixed in 0.4.4)

Published 2020-12-31. Last modified 2026-06-17.