casualx/obfstr · Security
obfstr Type Confusion vulnerability
- GHSA ID
- GHSA-v2p5-q653-9j99
- CVE ID
- CVE-2024-58253
- Severity
- low
- Published
- Updated
- CVSS
- 2.9 · CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
- CVSS v3
- 2.9 · CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Description
In the obfstr crate before 0.4.4 for Rust, the obfstr! argument type is not restricted to string slices, leading to invalid UTF-8 conversion that produces an invalid value.
CWEs
- CWE-843 · Access of Resource Using Incompatible Type ('Type Confusion')