CVE-2025-48756
Published May 24, 2025
·Updated
In group_number in the scsir crate 0.2.0 for Rust, there can be an overflow because a hardware device may expect a small number of bits (e.g., 5 bits) for group number.
Affected Software
3 affected components
Rust scsir crate
rust/scsir<=0.2.0
Crates Scsir Rust=0.2.0
Event History
May 24, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 AM
Affected Software
Advisory Published
via GitHub·03:30 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-48756?
The severity of CVE-2025-48756 is classified as medium due to the potential for overflow in group number handling.
2
How do I fix CVE-2025-48756?
To fix CVE-2025-48756, you should update to the latest version of the scsir crate that addresses the overflow issue.
3
What versions of the scsir crate are affected by CVE-2025-48756?
All versions of the scsir crate prior to the fix for CVE-2025-48756 are potentially affected.
4
What impact does CVE-2025-48756 have on software using the scsir crate?
CVE-2025-48756 can lead to unexpected behavior or crashes in software due to integer overflow in group number handling.
5
Is CVE-2025-48756 a known vulnerability in Rust applications?
Yes, CVE-2025-48756 is a documented vulnerability specifically related to the usage of the scsir crate in Rust applications.