CVE-2020-36205

An issue was discovered in the xcb crate through 2020-12-10 for Rust. base::Error does not have soundness. Because of the public ptr field, a use-after-free or double-free can occur.

• CWE-415
• CWE-416

• https://rustsec.org/advisories/RUSTSEC-2020-0097.htmlExploit, Vendor Advisory
• https://rustsec.org/advisories/RUSTSEC-2020-0097.htmlExploit, Vendor Advisory

Published

Jan 26, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-3620u'Lack of check of integer overflow while doing a round up o…5.5
• CVE-2020-36200TinyCheck before commits 9fd360d and ea53de8 allowed an auth…6.5
• CVE-2020-36201An issue was discovered in certain Xerox WorkCentre products…7.5
• CVE-2020-36202An issue was discovered in the async-h1 crate before 2.3.0 f…6.1
• CVE-2020-36203An issue was discovered in the reffers crate through 2020-12…4.7
• CVE-2020-36204An issue was discovered in the im crate through 2020-11-09 f…4.7
• CVE-2020-36206An issue was discovered in the rusb crate before 0.7.0 for R…7
• CVE-2020-36207An issue was discovered in the aovec crate through 2020-12-1…7
• CVE-2020-36208An issue was discovered in the conquer-once crate before 0.3…7.8
• CVE-2020-36209An issue was discovered in the late-static crate before 0.4.…7
• CVE-2020-3621u'Lack of check to ensure that the TX read index & RX write …5.5
• CVE-2020-36210An issue was discovered in the autorand crate before 0.2.3 f…7.8