cve.bz

CVE-2025-48756

9.8 criticalEPSS 0.3%

Critical (9.8) in crates scsir. EPSS 0.3% chance of exploitation in the next 30 days.

In group_number in the scsir crate 0.2.0 for Rust, there can be an overflow because a hardware device may expect a small number of bits (e.g., 5 bits) for group number.

Severity

CVSS 3.1

9.8 critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.3% chance of exploitation in the next 30 days; higher than 25% of CVEs (scores of 2026-10-31)
CWE
CWE-843
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-cm3g-qm4h-xm6mcrates.ioscsir<=0.2.0no fix published

References

Check your stackJSON