CVE-2025-48755

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

In the spiral-rs crate 0.2.0 for Rust, allocation can be attempted for a ZST (zero-sized type).

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-762

Affected software

VendorProductVersions
blyssprivacysdk0.2.0

References

Timeline

Published
May 24, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-487569.8In group_number in the scsir crate 0.2.0 for Rust, there can be an overflow because a hardware device may expect a small number of bits (e.gCVE-2025-487579.3An insufficient database Row-Level Security policy in Lovable through 2025-04-15 allows remote unauthenticated attackers to read or write toCVE-2025-48764.4ConnectWise-Password-Encryption-Utility.exe in ConnectWise Risk Assessment allows an attacker to extract a hardcoded AES decryption key via CVE-2025-487686.5Release of Invalid Pointer or Reference vulnerability was discovered in fs/inode/fs_inoderemove code of the Apache NuttX RTOS that allowed rCVE-2025-487698.1Use After Free vulnerability was discovered in fs/vfs/fs_rename code of the Apache NuttX RTOS, that due recursive implementation and single CVE-2025-48774.5There's a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to ssh_get_fingerpriCVE-2025-48783.6A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function.CVE-2025-487809.8A deserialization of untrusted data vulnerability in the download file function of Soar Cloud HRD Human Resource Management System through vCVE-2025-487817.5An external control of file name or path vulnerability in the download file function of Soar Cloud HRD Human Resource Management System throCVE-2025-487829.8An unrestricted upload of file with dangerous type vulnerability in the upload file function of Soar Cloud HRD Human Resource Management SysCVE-2025-487837.5An external control of file name or path vulnerability in the delete file function of Soar Cloud HRD Human Resource Management System througCVE-2025-487847.5A missing authorization vulnerability in Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attacke
CVE-2025-48755: Critical severity, CVSS 9.8 | Vulnix