PT-2025-20472 · Unknown · Trailer Crate

Cxworks · Published 2025-05-09 · Updated 2025-05-09 · CVE-2025-47737

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions trailer crate versions 0.1.2 and earlier

Description The issue is related to the lib.rs file in the trailer crate for Rust, which mishandles allocating with a size of zero.

Recommendations For trailer crate version 0.1.2 and earlier, consider updating to a newer version that addresses the allocation issue, although the exact fixed version is not specified in the provided information. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-762

Related Identifiers

CVE-2025-47737

GHSA-6X45-R4PR-5362

Affected Products

Trailer Crate

References · 11

• 🔥 https://github.com/Geal/trailer/issues/2 · Exploit
• https://osv.dev/vulnerability/GHSA-6x45-r4pr-5362 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-47737 · Security Note
• https://osv.dev/vulnerability/CVE-2025-47737 · Vendor Advisory
• https://github.com/Geal/trailer · Note
• https://t.me/cvedetector/24908 · Telegram Post
• https://twitter.com/CVEnew/status/1920709323795157417 · Twitter Post
• https://crates.io/crates/trailer · Note
• https://t.me/cvenotify/121509 · Telegram Post
• https://t.me/cvetracker/23440 · Telegram Post
• https://t.me/cvenotify/121590 · Telegram Post