CVE-2024-58253

—

CVSS 3.1

2.9 low

EPSS

<1%p6

Published

May 2, 2025 (May 2, 2025)

Modified

Jun 17, 2026

Description

In the obfstr crate before 0.4.4 for Rust, the obfstr! argument type is not restricted to string slices, leading to invalid UTF-8 conversion that produces an invalid value.

Weakness: CWE-843
Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.