PT-2025-18914 · Obfstr · Obfstr

Published 2025-05-02 · Updated 2025-05-03 · CVE-2024-58253

Positive Technologies (AI Summary)

CVSS v3.1

2.9

Low

Base vector

AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions obfstr crate versions prior to 0.4.4

Description The issue arises from the obfstr! argument type not being restricted to string slices, resulting in invalid UTF-8 conversion that produces an invalid value.

Recommendations For versions prior to 0.4.4, update to version 0.4.4 or later to resolve the issue.

Fix

Type Confusion

Weakness Enumeration

CWE-843

Related Identifiers

CVE-2024-58253

GHSA-V2P5-Q653-9J99

Affected Products

Obfstr

References · 9

• https://osv.dev/vulnerability/CVE-2024-58253 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-v2p5-q653-9j99 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-58253 · Security Note
• https://github.com/CasualX/obfstr/compare/v0.4.3...v0.4.4 · Note
• https://github.com/CasualX/obfstr/issues/60 · Note
• https://github.com/CasualX/obfstr · Note
• https://t.me/cvetracker/22964 · Telegram Post
• https://twitter.com/CVEnew/status/1918568502828650802 · Twitter Post
• https://t.me/cvedetector/24379 · Telegram Post