Vulnerability RUSTSEC-2023-0083
High Risk
HIGH RISK
CVSS Score: 8.6
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
3 years ago
September 19, 2023 at 12:00 PM UTC
blurhash: panic on parsing crafted blurhash inputs
0.1.0 - 0.1.1
0.1.0 - 0.1.1
Summary
blurhash: panic on parsing crafted blurhash inputs
Details
Impact
The blurhash parsing code may panic due to multiple panic-guarded out-of-bounds accesses on untrusted input.
In a typical deployment, this may get triggered by feeding a maliciously crafted blurhashes over the network. These may include:
- UTF-8 compliant strings containing multi-byte UTF-8 characters
Patches
The patches were released under version 0.2.0, which may require user intervention because of slight API churn.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Impacted packages
Timeline
Published
3 years ago
September 19, 2023 at 12:00 PM UTC
Fixed (0.2.0)
3 years ago
September 19, 2023 at 11:34 AM UTC
Last Modified
2 hours ago
October 13, 2026 at 03:15 PM UTC