Skip to content

Memory-corruption in memory handling of lib-kcl

Moderate
maxammann published GHSA-mc9m-6fm9-pghc Jun 12, 2026

Package

cargo kcl-lib (Rust)

Affected versions

<v0.2.153

Patched versions

0.2.153
pip zoo-kcl (pip)
<0.3.153
0.3.153

Description

A race condition in kcl-lib can result in a use-after-free when accessing environments concurrently. During Vec reallocation, the previous buffer containing Box pointers is freed and replaced. A concurrent get_env operation that has already loaded a pointer to the old buffer may subsequently index into freed memory and retrieve a stale or corrupted Pin<Box>.

Severity

Moderate

CVE ID

No known CVE

Weaknesses

No CWEs

Credits