In crossbeam-channel rust crate, the internal Channel type's Drop method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption.
Channel
Drop
{ "ubuntu_priority": "medium" }