← All advisories

Medium severity5.5NVD Advisory· Published Dec 31, 2020· Updated Jun 17, 2026

CVE-2020-35917

CVE-2020-35917

Description

An issue was discovered in the pyo3 crate before 0.12.4 for Rust. There is a reference-counting error and use-after-free in From<Py>.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
pyo3crates.io	>= 0.12.0, < 0.12.4	0.12.4

Affected products

3

Pyo3 Project/Pyo3
cpe:2.3:a:pyo3_project:pyo3:*:*:*:*:*:rust:*:*
Range: <0.12.4
Rust/pyo3description
ghsa-coords
pkg:cargo/pyo3
Range: >= 0.12.0, < 0.12.4

Patches

Vulnerability mechanics

References

5

rustsec.org/advisories/RUSTSEC-2020-0074.htmlnvdExploitPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-2vx6-fcw6-hpr6ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2020-35917ghsaADVISORY
github.com/PyO3/pyo3/commit/8f81f595dd770b586c7ca7195b42004a6c976eb9ghsaWEB
github.com/PyO3/pyo3/pull/1297ghsaWEB

News mentions

0

No linked articles in our index yet.