PT-2025-20470 · Wgp · Wgp

Cxworks · Published 2025-05-09 · Updated 2025-05-09 · CVE-2025-47735

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions wgp crate versions 0.2.0 and earlier

Description The issue is related to the lack of drop slow thread synchronization in the inner::drop function within the inner.rs file of the wgp crate for Rust. This synchronization issue may lead to problems when multiple threads are accessing the same resource.

Recommendations For wgp crate versions 0.2.0 and earlier, consider disabling the inner::drop function until a patch is available to address the lack of drop slow thread synchronization. Restrict access to the inner.rs file to minimize the risk of exploitation. Avoid using the inner::drop function in multithreaded environments until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2025-47735

GHSA-2W4W-4385-VH4H

Affected Products

Wgp

References · 11

• 🔥 https://github.com/Nugine/wgp/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-47735 · Security Note
• https://osv.dev/vulnerability/GHSA-2w4w-4385-vh4h · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-47735 · Vendor Advisory
• https://github.com/Nugine/wgp · Note
• https://t.me/cvenotify/121589 · Telegram Post
• https://t.me/cvedetector/24906 · Telegram Post
• https://t.me/cvenotify/121507 · Telegram Post
• https://crates.io/crates/wgp · Note
• https://twitter.com/CVEnew/status/1920709321999991227 · Twitter Post
• https://t.me/cvetracker/23438 · Telegram Post