CVE-2020-25575
9.8
CRITICAL · CVSS 3.1 · EPSS 2.9% (pctl 87)
In your normal cycle
Critical by CVSS (9.8), but no sign of active exploitation.
Description
An issue was discovered in the failure crate through 0.1.5 for Rust. It may introduce "compatibility hazards" in some applications, and has a type confusion flaw when downcasting. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: This may overlap CVE-2019-25010
Scoring
| CVSS | 9.8 (CRITICAL, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 2.93% — more likely to be exploited than 87% of all CVEs |
| Weakness | CWE-843 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2020-09-14 |
| Last modified | 2026-06-17 |
Affected (1)
| Vendor | Product |
|---|---|
| failure project | failure |
References
- https://boats.gitlab.io/blog/post/failure-to-fehler/
- https://github.com/rust-lang-nursery/failure/issues/336
- https://rustsec.org/advisories/RUSTSEC-2020-0036.html
- https://boats.gitlab.io/blog/post/failure-to-fehler/
- https://github.com/rust-lang-nursery/failure/issues/336
- https://rustsec.org/advisories/RUSTSEC-2020-0036.html
→ the Explorer · watch your stack · NVD