PT-2025-31020 · Transpose+1 · Transpose+1

Published 2023-12-18 · Updated 2025-08-12 · CVE-2023-53156

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions transpose crate versions prior to 0.2.3

Description The transpose crate contains a flaw that allows for an integer overflow through the input width and input height arguments.

Recommendations Update to transpose crate version 0.2.3 or later.

Fix

Integer Overflow

Buffer Overflow

Weakness Enumeration

CWE-190

CWE-120

Related Identifiers

CVE-2023-53156

GHSA-5GMM-6M36-R7JH

GHSA-P444-P2RM-HVRW

OPENSUSE-SU-2025:15433-1

RUSTSEC-2023-0080

Affected Products

Debian

Transpose

References · 21

• https://cve.org/CVERecord?id=CVE-2023-53156 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-53156 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53156 · Security Note
• https://ubuntu.com/security/CVE-2023-53156 · Vendor Advisory
• https://osv.dev/vulnerability/RUSTSEC-2023-0080 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53156 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-5gmm-6m36-r7jh · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53156 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53156 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-p444-p2rm-hvrw · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15433-1 · Vendor Advisory
• https://github.com/ejmahler/transpose · Note
• https://github.com/ejmahler/transpose/issues/11 · Note
• https://github.com/ejmahler/transpose/commit/c4bcd39fabca9a31a401d0cc42d4090869b5a37a · Note
• https://suse.com/security/cve/CVE-2023-53156 · Note