N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-58xc-hpvq-8473

GHSA-58xc-hpvq-8473: Redox UEFI Safe API can cause heap-buffer-overflow

ffi::nstr() should be marked unsafe, since a pointer to a buffer without a trailing 0 value will cause a heap buffer overflow.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-58xc-hpvq-8473

GHSA-58xc-hpvq-8473:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
redox_uefi_std	rust	>= 0.1.8, < 0.1.14	0.1.14

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability description and the RustSec advisory (RUSTSEC-2025-0032) explicitly state that the ffi::nstr() function is the source of the heap-buffer-overflow. The provided commit URL, although not directly processable by the get_commit_infos tool (as it's a GitLab URL), has a commit message 'Mark nstr as unsafe, fixing unsoundness issue', which corroborates the information from the advisory. The advisory also clearly lists redox_uefi_std::ffi::nstr under 'Affected Functions'. The vulnerability occurs because a supposedly safe function could lead to memory corruption if misused. The patch changes the function signature to unsafe, which is a mitigation by shifting the responsibility of ensuring correct usage (null-terminated string) to the caller.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.