CVE-2020-36211: 
Rust vulnerability analysis and mitigation

An issue was discovered in the gfwx crate before 0.3.0 for Rust. The vulnerability was identified on January 20, 2021, affecting the ImageChunkMut implementation. The core issue lies in the absence of bounds on its Send trait and Sync trait, which could lead to potential security risks (NVD, RustSec).

The vulnerability stems from ImageChunkMut<'_, T> unconditionally implementing Send and Sync traits without proper bounds. This implementation flaw allows for the creation of data races when non thread-safe types are moved and referenced across thread boundaries. The vulnerability has been assigned a CVSS v3.1 base score of 7.0 (HIGH) with the vector string CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H (RustSec).

The vulnerability can result in memory corruption and undefined behavior when non thread-safe types are moved and referenced across thread boundaries. This poses significant risks to application stability and security, potentially leading to data corruption or system instability (RustSec).

The vulnerability requires local access with low privileges and high attack complexity to exploit. No user interaction is needed for exploitation, though the attacker needs specific conditions to trigger the vulnerability (RustSec).

The vulnerability was patched in version 0.3.0 of the gfwx crate. The fix was implemented in commit e7fb2f5 by adding T: Send bound to the Send implementation and T: Sync bound to the Sync implementation (RustSec).