CVSS 3.1
2.9 lowCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:NCVE-2024-58253
Low (2.9). EPSS 0.2% chance of exploitation in the next 30 days. Fixed in obfstr 0.4.4.
In the obfstr crate before 0.4.4 for Rust, the obfstr! argument type is not restricted to string slices, leading to invalid UTF-8 conversion that produces an invalid value.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 6% of CVEs (scores of 2026-10-31)
- CWE
- CWE-843
- Published
- Modified
- Record from
- the NVD, synced
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-v2p5-q653-9j99 | crates.io | obfstr | <0.4.4 | 0.4.4 |