GitHub Advisoryadvisory · crates.io

GHSA-cm3g-qm4h-xm6m SCSIR has a Potential Unsound Issue in WriteSameCommand

LOW Published 2025-05-24 Modified 2025-05-27 Official page ↗
Aliases
CVE-2025-48756
Ecosystem
crates.io
Packages
scsir
Severity
Low
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Weaknesses
CWE-843
Reviewed
2025-05-27

Affected packages

• crates.io scsir: <= 0.2.0 (no fix yet)

Description

In group_number in the scsir crate 0.2.0 for Rust, there can be an overflow because a hardware device may expect a small number of bits (e.g., 5 bits) for group number.

Related

Alias · CVE (1)

  • CVE-2025-48756 In group_number in the scsir crate 0.2.0 for Rust, there can be an overflow because a hardware device may expect a small number of bits… vulnerability

Weakness · CWE (1)

  • CWE-843 Access of Resource Using Incompatible Type weakness

References