CVE-2025-48756: Crates Scsir

Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days.

In group_number in the scsir crate 0.2.0 for Rust, there can be an overflow because a hardware device may expect a small number of bits (e.g., 5 bits) for group number.

Affected products

• Crates Scsir: version 0.2.0 only

Published 2025-05-24. Last modified 2026-06-17.