{"id":"GHSA-9c9f-7x9p-4wqp","aliases":["RUSTSEC-2022-0007"],"url":"https://o3.security/vulnerability/GHSA-9c9f-7x9p-4wqp","summary":"A malicious coder can get unsound access to TCell or TLCell memory","details":"This is impossible to do by accident, but by carefully constructing\nmarker types to be covariant, a malicious coder can cheat the\nsingleton check in `TCellOwner` and `TLCellOwner`, giving unsound\naccess to cell memory.  This could take the form of getting two\nmutable references to the same memory, or a mutable reference and an\nimmutable reference.\n\nThe fix is for the crate to internally force the marker type to be\ninvariant.  This blocks the conversion between covariant types which\nRust normally allows.\n","published":"2022-06-17T00:16:11Z","modified":"2023-11-08T04:17:51.156433Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"crates.io","name":"qcell","fixedVersion":"0.4.3"}],"fix":null,"references":[{"type":"WEB","url":"https://github.com/uazu/qcell/issues/20"},{"type":"PACKAGE","url":"https://github.com/uazu/qcell"},{"type":"WEB","url":"https://rustsec.org/advisories/RUSTSEC-2022-0007.html"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2023-11-08T04:17:51.156433Z"}}