Rust borrow checker issue allows memory access

2026-10-16

An analysis of Rust borrow checker issue 164250 highlights an unsoundness where covariant field assignment can bypass lifetime bounds during implicit drops. This vulnerability, present in versions from 1.49.0 to nightly, allows programs to read freed memory unless fields are private or checked with Miri. Exploitation reportedly requires a malicious Drop implementation.