CVE-2020-25575

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2020-09-14 · updated 2026-06-17
Weakness: CWE-843

Description

An issue was discovered in the failure crate through 0.1.5 for Rust. It may introduce "compatibility hazards" in some applications, and has a type confusion flaw when downcasting. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: This may overlap CVE-2019-25010

Affected products

Failure Project Failure: through 0.1.8

References

https://boats.gitlab.io/blog/post/failure-to-fehler/
https://github.com/rust-lang-nursery/failure/issues/336
https://rustsec.org/advisories/RUSTSEC-2020-0036.html
https://boats.gitlab.io/blog/post/failure-to-fehler/
https://github.com/rust-lang-nursery/failure/issues/336
https://rustsec.org/advisories/RUSTSEC-2020-0036.html

Get alerted when CVE-2020-25575 or the next vulnerability affects your stack