CVE-2024-58253CWE-843

In the obfstr crate before 0.4.4 for Rust, the obfstr!

Low · published May 2, 2025

CVSS v3.1
2.9
EPSS
0%
Percentile
5.9
In the wild
Unconfirmed
What it is

In the obfstr crate before 0.4.4 for Rust, the obfstr! argument type is not restricted to string slices, leading to invalid UTF-8 conversion that produces an invalid value.

The record
Technical detail
CVSS v3.1
2.9 · LOW
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00168 · 5.9th percentile
Weakness
CWE-843 · Access of Resource Using Incompatible Type ('Type Confusion')
Published
2025-05-02T00:00Z
EPSS history
Timeline
  • 02 MAY 00:00Z
    In the obfstr crate before 0.4.4 for Rust, the obfstr!
    cvelistv5