Vulnerability Details CVE-2019-25004
An issue was discovered in the flatbuffers crate before 0.6.1 for Rust. Arbitrary bytes can be reinterpreted as a bool, defeating soundness.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 38.6%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
Products affected by CVE-2019-25004
-
cpe:2.3:a:google:flatbuffers:0.4.0
-
cpe:2.3:a:google:flatbuffers:0.5.0
-
cpe:2.3:a:google:flatbuffers:0.6.0