RUSTSEC-2025-0028
cve-rs introduces memory vulnerabilities in safe Rust
This crate is a joke and should never be used.
cve-rs provides demonstrations of common memory vulnerabilities (such as buffer overflows and segfaults) implemented completely within safe Rust.
Internally, this crate does not use unsafe code, it instead exploits a soundness bug in rustc: https://github.com/rust-lang/rust/issues/25860
What each source reports
OSVNo score
cve-rs introduces memory vulnerabilities in safe Rust
This crate is a joke and should never be used.
cve-rs provides demonstrations of common memory vulnerabilities (such as buffer overflows and segfaults) implemented completely within safe Rust.
Internally, this crate does not use unsafe code, it instead exploits a soundness bug in rustc: https://github.com/rust-lang/rust/issues/25860
- Record
RUSTSEC-2025-0028- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cve-rscrates.io | 0.0.0-0 and later | None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
RUSTSEC-2025-0028 is a vulnerability with no CVSS score yet in cve-rs, published February 10, 2025. No source lists public exploit code. No source names a fixed version.