CVE-2023-53160

Published: Jul 28, 2025Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

The sequoia-openpgp crate before 1.16.0 for Rust allows out-of-bounds array access and a panic.

Affected (3)

Products: Sequoia Pgp: Sequoia Openpgp

1 product

Sequoia Openpgp

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Sequoia Pgp Sequoia Openpgp	version < 1.1.1
Sequoia Pgp Sequoia Openpgp	1.2.0 ≤ version < 1.8.1
Sequoia Pgp Sequoia Openpgp	1.9.0 ≤ version < 1.16.0

Related CWEs

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (4)

https://crates.io/crates/sequoia-openpgp

Source: cve@mitre.org

Product

https://github.com/advisories/GHSA-25mx-8f3v-8wh7

Source: cve@mitre.org

Third Party Advisory

https://lists.sequoia-pgp.org/hyperkitty/list/announce@lists.sequoia-pgp.org/thread/SN2E3QRT4DMQ5JNEK6VIN6DJ5SH766DI/

Source: cve@mitre.org

Patch

https://rustsec.org/advisories/RUSTSEC-2023-0038.html

Source: cve@mitre.org

Third Party Advisory

Timeline

No history available yet.