Threat database

A race condition vulnerability (CWE-362) exists in tokio-rs tokio version 1.54.0 involving improper synchronization between tokio::time::Interval::poll_tick and the multi-threaded runtime's time driver. This can cause use-after-free issues leading to assertion panics, task reference-count corruption, or heap memory corruption. The issue is fixed in version 1.54.1.

CVE-2026-25541 is a medium severity integer overflow vulnerability in the tokio-rs bytes library affecting versions 1.2.1 through 1.11.0. The issue arises in the BytesMut::reserve function where unchecked addition can overflow the usize type in release builds, corrupting the capacity value. This can lead to out-of-bounds slices and undefined behavior, potentially causing memory corruption or crashes. No authentication or user interaction is required to trigger the vulnerability. It has been patched in version 1.11.

EPSS 0.6%Vulnerabilitytokio-rs#cwe-680Germany+7

CVE-2025-58160 is a low-severity vulnerability in the tokio-rs tracing framework's tracing-subscriber component prior to version 0.3.20. It involves improper neutralization of ANSI escape sequences in untrusted input that is logged and displayed in terminal emulators. This can allow attackers to inject ANSI sequences that manipulate terminal output, such as changing terminal titles or clearing the screen, potentially misleading users. The issue is fixed in version 0.3.20 by escaping ANSI control characters in terminal output. No known exploits have been reported in the wild.

slab is a pre-allocated storage for a uniform data type. In version 0.4.10, the get_disjoint_mut method incorrectly checked if indices were within the slab's capacity instead of its length, allowing access to uninitialized memory. This could lead to undefined behavior or potential crashes. This has been fixed in slab 0.4.11. A workaround for this issue involves to avoid using get_disjoint_mut with indices that might be beyond the slab's actual length.

EPSS 0.2%Vulnerabilitytokio-rs#cwe-119Germany+6