CVE-2025-48755

LOW

Published May 24, 2025 Modified Jan 30, 2026 CWE-762

Description

In the spiral-rs crate 0.2.0 for Rust, allocation can be attempted for a ZST (zero-sized type).

CVSS v3.1 Score

2.9

LOW

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Weakness Type (CWE)

CWE-762 CWE-762

Affected Products

Vendor	Product	Versions
blyssprivacy	spiral-rs	All

References

Exploits

https://github.com/blyssprivacy/sdk/issues/36

Other References

https://crates.io/crates/spiral-rs

Frequently Asked Questions

What is CVE-2025-48755? +

In the spiral-rs crate 0.2.0 for Rust, allocation can be attempted for a ZST (zero-sized type). It has a CVSS v3.1 base score of 2.9 (LOW).

How severe is CVE-2025-48755? +

CVE-2025-48755 has a CVSS v3.1 score of 2.9 out of 10, rated LOW. This is a low-severity vulnerability with limited impact.

What products are affected by CVE-2025-48755? +

CVE-2025-48755 affects products from blyssprivacy, specifically: spiral-rs. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2025-48755? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2024-32503 8.4

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos 1080, Exynos 2100, Exynos 1280, Exynos …

CVE-2023-41056 8.1

Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in …

CVE-2024-2955 7.8

T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or …

CVE-2025-48431 7.5

Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings. This issue affects Apache Thrift: before 0.23.0. Users are …

CVE-2025-49080 7.5

There is a memory management vulnerability in Absolute Secure Access server versions 9.0 to 13.54. Attackers with network access to …

CVE-2025-20189 7.4

A vulnerability in the Cisco Express Forwarding functionality of Cisco IOS XE Software for Cisco ASR 903 Aggregation Services Routers …