CVE-2024-58253

State
Published
Severity
2.9 Low
Published
May 2, 2025
Updated
May 5, 2025
Reserved
May 2, 2025

Read the record on cve.org

Description

In the obfstr crate before 0.4.4 for Rust, the obfstr! argument type is not restricted to string slices, leading to invalid UTF-8 conversion that produces an invalid value.

Scores

CVSSScoreVectorSource
3.12.9 LowCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:Nmitre

Weaknesses

  • CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')

Affected Products

ProductVersions
obfstrCasualX
  • before 0.4.4Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.