~ / search / GHSA-cm3g-qm4h-xm6m

GHSA-cm3g-qm4h-xm6m

SCSIR has a Potential Unsound Issue in WriteSameCommand

Source: GitHub Advisory Database (reviewed) Low CVE-2025-48756

Packages

EcosystemPackageAffectedFixed in
crates.io scsir <= 0.2.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

In group_number in the scsir crate 0.2.0 for Rust, there can be an overflow because a hardware device may expect a small number of bits (e.g., 5 bits) for group number.

References

External links from the advisory. They lead to third-party sites.