Access of Resource Using Incompatible Type ('Type Confusion') Affecting dyn-future package, versions *

Q: How to fix?

There is no fixed version for dyn-future .

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk Learn

Learn about Access of Resource Using Incompatible Type ('Type Confusion') vulnerabilities in an interactive lesson.

Start learning

Snyk IDSNYK-RUST-DYNFUTURE-16069594
published15 Apr 2026
disclosed4 Apr 2026
creditxizheyin

Report a new vulnerability Found a mistake?

Introduced: 4 Apr 2026

NewCWE-843 (opens in a new tab)

How to fix?

There is no fixed version for dyn-future.

Overview

Affected versions of this package are vulnerable to Access of Resource Using Incompatible Type ('Type Confusion') in the Drop implementation. An attacker can cause memory safety violations by triggering the construction of invalid references from trait object metadata.

Note:

The crate is unmaintained.

References

CVSS Base Scores

version 4.0

version 3.1

Attack Vector (AV)
Network
Attack Complexity (AC)
Low
Attack Requirements (AT)
Present
Privileges Required (PR)
None
User Interaction (UI)
None

Confidentiality (VC)
Low
Integrity (VI)
Low
Availability (VA)
None

Confidentiality (SC)
None
Integrity (SI)
None
Availability (SA)
None