CVE-2020-36440: 
Rust vulnerability analysis and mitigation

An issue was discovered in the libsbc crate before 0.1.5 for Rust. The vulnerability relates to the Decoder implementation, where it incorrectly implements Send for any R: Read, potentially leading to unsafe thread operations (RustSec Advisory).

The vulnerability stems from the Decoder implementation that allows Decoder to contain R: !Send and move it to another thread. This implementation flaw could result in undefined behavior, such as memory corruption from data races on R, or incorrectly dropping MutexGuard from a thread that didn't lock the mutex. The issue has a CVSS score of 8.1 (High) with vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H (RustSec Advisory).

The vulnerability can lead to memory corruption, thread safety issues, and undefined behavior in applications using the affected versions of the libsbc crate. This could potentially result in application crashes or other memory-related security issues (RustSec Advisory).

The vulnerability was fixed in version 0.1.5 of the libsbc crate by adding the trait bound R: Send to the Send implementation for Decoder. Users should upgrade to version 0.1.5 or later to address this security issue (RustSec Advisory).