CVE-2025-4574
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
In the crossbeam-channel Rust crate, the `Drop` method of the internal `Channel` type has a race condition that could, under certain circumstances, lead to a double-free resulting in memory corruption.
Risk Assessment
The risk involves potential memory corruption, which can lead to unpredictable application behavior, crashes, or potential exploitation by an attacker for privilege escalation.
Recommendation
It is recommended to immediately update the crossbeam-channel crate to the latest version containing a fix that eliminates the race condition in the `Drop` method.
Original NVD description (English source)
In crossbeam-channel rust crate, the internal `Channel` type's `Drop` method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption.