CVE-2024-58253 | THREATINT

Description

In the obfstr crate before 0.4.4 for Rust, the obfstr! argument type is not restricted to string slices, leading to invalid UTF-8 conversion that produces an invalid value.

Reserved 2025-05-02 | Published 2025-05-02 | Updated 2025-05-05 | Assigner mitre

LOW: 2.9CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Problem types

CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')

Product status

Default status

unaffected

Any version before 0.4.4

affected

References

github.com/CasualX/obfstr/issues/60

github.com/CasualX/obfstr/compare/v0.4.3...v0.4.4

cve.org (CVE-2024-58253)

nvd.nist.gov (CVE-2024-58253)

Download JSON