Medium severity5.9NVD Advisory· Published Aug 8, 2021· Updated Jun 17, 2026

CVE-2020-36472

Description

An issue was discovered in the max7301 crate before 0.2.0 for Rust. The ImmediateIO and TransactionalIO types implement Sync for all Expander types that they contain.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
max7301crates.io	< 0.2.0	0.2.0

Affected products

Max7301 Project/Max7301
cpe:2.3:a:max7301_project:max7301:*:*:*:*:*:rust:*:*
Range: <0.2.0
max7301/max7301description
ghsa-coords
pkg:cargo/max7301
Range: < 0.2.0

Patches

Vulnerability mechanics

References

rustsec.org/advisories/RUSTSEC-2020-0152.htmlnvdExploitIssue TrackingPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-rmff-f8w9-c9rmghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2020-36472ghsaADVISORY
raw.githubusercontent.com/rustsec/advisory-db/main/crates/max7301/RUSTSEC-2020-0152.mdnvdThird Party Advisory
github.com/edarc/max7301/commit/0a1da873ddb29bca926bad8301f8d7ab8aa97c52ghsaWEB
github.com/edarc/max7301/issues/1ghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.384
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000