MEDIUMCVSS 6.9

GHSA-mc9m-6fm9-pghc

Zoo Design Studio: Memory-corruption in memory handling of lib-kcl

Published: 2026-08-20
Modified: 2026-08-20
Sources: github-advisory

Summary

A race condition in kcl-lib can result in a use-after-free when accessing environments concurrently. During Vec reallocation, the previous buffer containing Box pointers is freed and replaced. A concurrent get_env operation that has already loaded a pointer to the old buffer may subsequently index into freed memory and retrieve a stale or corrupted Pin >.

Affected packages

Ecosystem	Package	Affected versions	Fixed versions
PyPI	zoo-kcl	—	0.3.153
rust	kcl-lib	—	0.2.153

Remediation: Upgrade to 0.3.153 or later.

References

https://github.com/advisories/GHSA-mc9m-6fm9-pghc

Includes data from the GitHub Advisory Database, licensed under CC-BY 4.0.