{"id":"EUVD-2026-36469","enisaUuid":"e9d0aaaf-6d44-3f53-86f6-4abb697e4b60","description":"unbounded_spsc is an \"unbounded\" extension of bounded_spsc_queue. In versions 0.2.0 and prior, sender::send pointer-as-value transmute causes OOB read and fake-Arc drop under TX/RX race. At time of publication, there are no publicly available patches.","datePublished":"Jun 12, 2026, 2:56:10 PM","dateUpdated":"Jun 12, 2026, 3:54:30 PM","baseScore":5.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H","references":"https://github.com/spearman/unbounded-spsc/security/advisories/GHSA-6m57-8r3p-pqx6\n","aliases":"CVE-2026-46690\nGHSA-6m57-8r3p-pqx6\n","assigner":"GitHub_M","epss":0.13,"enisaIdProduct":[{"id":"933601cf-87aa-3855-ad9a-edc51e2db7e7","product":{"name":"unbounded-spsc","vendor":{"name":"spearman"}},"product_version":"≤ 0.2.0"}],"enisaIdVendor":[{"id":"8aac5e3f-7497-3844-abd8-5fb9edc8d8b9","vendor":{"name":"spearman"}}],"enisaIdVulnerability":[{"id":"302e977c-1d06-3d2f-a639-64bf281b6ce2","vulnerability":{"id":"GHSA-6m57-8r3p-pqx6","description":"unbounded-spsc: Sender::send pointer-as-value transmute causes OOB read and fake-Arc drop under TX/RX race","datePublished":"May 29, 2026, 7:05:21 PM","dateUpdated":"Jun 12, 2026, 7:31:16 PM","baseScore":0.0,"references":"https://github.com/spearman/unbounded-spsc/security/advisories/GHSA-6m57-8r3p-pqx6\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-46690\nhttps://github.com/spearman/unbounded-spsc\n","enisa_id":"EUVD-2026-36469\n","aliases":"CVE-2026-46690\nGHSA-6m57-8r3p-pqx6\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:01:03 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"b36a01d2-9a91-3f54-8cf2-fe089a500d0f","vulnerability":{"id":"CVE-2026-46690","description":"unbounded_spsc is an \"unbounded\" extension of bounded_spsc_queue. In versions 0.2.0 and prior, sender::send pointer-as-value transmute causes OOB read and fake-Arc drop under TX/RX race. At time of publication, there are no publicly available patches.","datePublished":"Jun 12, 2026, 2:56:10 PM","dateUpdated":"Jun 12, 2026, 3:54:30 PM","status":"PUBLISHED","baseScore":5.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H","references":"https://github.com/spearman/unbounded-spsc/security/advisories/GHSA-6m57-8r3p-pqx6\n","enisa_id":"EUVD-2026-36469\n","assigner":"GitHub_M","epss":0.13,"dataProcessed":"Nov 3, 2026, 7:18:25 AM","vulnerabilityProduct":[{"id":"7a2ff1a0-a5a3-3ae4-b81a-8a07bedcd779","product":{"name":"unbounded-spsc","vendor":{"name":"spearman"}},"product_version":"≤ 0.2.0"}],"vulnerabilityVendor":[{"id":"df579b78-805b-300d-9510-f420ab9f862f","vendor":{"name":"spearman"}}]}}],"enisaIdAdvisory":[]}