CVE-2020-35902: Use-after-free in actix-codec

August 25, 2021 (updated May 23, 2025)

An issue was discovered in the actix-codec crate before 0.3.0-beta.1 for Rust. There is a use-after-free in Framed.

References

github.com/actix/actix-net
github.com/actix/actix-net/commit/c41b5d8dd4235ccca84d0b687996615c0c64d956
github.com/actix/actix-net/issues/91
github.com/advisories/GHSA-rqgx-hpg4-456r
nvd.nist.gov/vuln/detail/CVE-2020-35902
rustsec.org/advisories/RUSTSEC-2020-0049.html

Code Behaviors & Features

Detect and mitigate CVE-2020-35902 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →