CVE-2025-48752

LOW

process-sync 0.2.2 - Use After Free

Title source: llm

In the process-sync crate 0.2.2 for Rust, the drop function lacks a check for whether the pthread_mutex is unlocked.

Core 2

Core References

Product

Exploit, Issue Tracking

CVSS v3 2.9

EPSS 0.0030

EPSS Percentile 21.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

CWE

CWE-416

Status published

Products (2)

crates.io/process-sync 0crates.io

forestryks/process-sync 0.2.2

Published May 24, 2025

Tracked Since Feb 18, 2026