VDB
CVE-2023-53156
CVE-2023-53156
PUBLISHED
CVSS 4.5 MEDIUM
transpose: Buffer overflow due to integer overflow
EPSS 0.32% · 24.9th percentile
Risk Scores
CVSS 3.1
4.5
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L
EPSS Score
0.32%
24.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| ejmahler | transpose | 0, 0.1.0 |
| crates.io | transpose | 0.1.0 |
Timeline
- Dec 18, 2023 CVE Published
- Jul 27, 2025 Coalition ESS Score
- Jul 28, 2025 EPSS Score
- Jul 29, 2025 Coalition ESS Score
- Aug 7, 2025 EPSS Score
- Aug 7, 2025 Coalition ESS Score
- Aug 13, 2025 PoC Published
- Aug 16, 2025 EPSS Score
- Aug 26, 2025 EPSS Score
- Sep 4, 2025 EPSS Score
- Sep 14, 2025 EPSS Score
- Sep 23, 2025 EPSS Score
References
- https://github.com/advisories/GHSA-5gmm-6m36-r7jh url
- https://crates.io/crates/transpose vendor
- https://github.com/ejmahler/transpose/issues/11 discussion
- https://rustsec.org/advisories/RUSTSEC-2023-0080.html advisory
- https://github.com/ejmahler/transpose package
- https://nvd.nist.gov/vuln/detail/CVE-2023-53156 advisory
- https://github.com/ejmahler/transpose/commit/c4bcd39fabca9a31a401d0cc42d4090869b5a37a fix