{"id":"EUVD-2025-28979","enisaUuid":"9cb02d7f-17ab-37be-970f-5153533e3081","description":"matrix-sdk-base is the base component to build a Matrix client library. In matrix-sdk-base before 0.14.1, calling the `RoomMember::normalized_power_level()` method can cause a panic if a room member has a power level of `Int::Min`. The issue is fixed in matrix-sdk-base 0.14.1. The affected method isn’t used internally, so avoiding calling `RoomMember::normalized_power_level()` prevents the panic.","datePublished":"Sep 11, 2025, 6:03:50 PM","dateUpdated":"Sep 11, 2025, 6:22:28 PM","baseScore":2.7,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U","references":"https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-qhj8-q5r6-8q6j\nhttps://github.com/matrix-org/matrix-rust-sdk/pull/5635\nhttps://github.com/matrix-org/matrix-rust-sdk/commit/ce3b67f801446387972ff120e907ca828a9f1207\nhttps://github.com/matrix-org/matrix-rust-sdk/releases/tag/matrix-sdk-base-0.14.1\n","aliases":"CVE-2025-59047\nGHSA-qhj8-q5r6-8q6j\n","assigner":"GitHub_M","epss":0.4,"enisaIdProduct":[{"id":"8cf29ea6-c21d-30f3-8196-cb0d8e72e5cb","product":{"name":"matrix-rust-sdk","vendor":{"name":"matrix-org"}},"product_version":"\u003c 0.14.1"}],"enisaIdVendor":[{"id":"2ca8b8c0-a049-3bda-b685-c1e1a7448c95","vendor":{"name":"matrix-org"}}],"enisaIdVulnerability":[{"id":"9421dc65-6201-384f-8808-5620b74974fd","vulnerability":{"id":"CVE-2025-59047","description":"matrix-sdk-base is the base component to build a Matrix client library. In matrix-sdk-base before 0.14.1, calling the `RoomMember::normalized_power_level()` method can cause a panic if a room member has a power level of `Int::Min`. The issue is fixed in matrix-sdk-base 0.14.1. The affected method isn’t used internally, so avoiding calling `RoomMember::normalized_power_level()` prevents the panic.","datePublished":"Sep 11, 2025, 6:03:50 PM","dateUpdated":"Sep 11, 2025, 6:22:28 PM","status":"PUBLISHED","baseScore":2.7,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U","references":"https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-qhj8-q5r6-8q6j\nhttps://github.com/matrix-org/matrix-rust-sdk/pull/5635\nhttps://github.com/matrix-org/matrix-rust-sdk/commit/ce3b67f801446387972ff120e907ca828a9f1207\nhttps://github.com/matrix-org/matrix-rust-sdk/releases/tag/matrix-sdk-base-0.14.1\n","enisa_id":"EUVD-2025-28979\n","assigner":"GitHub_M","epss":0.4,"dataProcessed":"Nov 2, 2026, 7:15:14 AM","vulnerabilityProduct":[{"id":"292b276c-a306-49bd-88c2-4a2092527df8","product":{"name":"matrix-rust-sdk","vendor":{"name":"matrix-org"}},"product_version":"\u003c 0.14.1"},{"id":"59c43a75-dda2-372c-bc93-c448f471674b","product":{"name":"matrix-rust-sdk","vendor":{"name":"matrix-org"}},"product_version":"\u003c 0.14.1"}],"vulnerabilityVendor":[{"id":"5e9724c9-6c00-3e46-af5e-4d8d593163d6","vendor":{"name":"matrix-org"}}]}},{"id":"df39ff67-ec16-32b2-94e9-3eafbfb57b0c","vulnerability":{"id":"GHSA-qhj8-q5r6-8q6j","description":"matrix-sdk-base: Panic in the `RoomMember::normalized_power_level()` method","datePublished":"Sep 11, 2025, 9:23:55 PM","dateUpdated":"Sep 11, 2025, 9:23:55 PM","baseScore":0.0,"references":"https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-qhj8-q5r6-8q6j\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-59047\nhttps://github.com/matrix-org/matrix-rust-sdk/pull/5635\nhttps://github.com/matrix-org/matrix-rust-sdk/commit/ce3b67f801446387972ff120e907ca828a9f1207\nhttps://github.com/matrix-org/matrix-rust-sdk\nhttps://github.com/matrix-org/matrix-rust-sdk/releases/tag/matrix-sdk-base-0.14.1\nhttps://rustsec.org/advisories/RUSTSEC-2025-0065.html\n","enisa_id":"EUVD-2025-28979\n","aliases":"GHSA-qhj8-q5r6-8q6j\nCVE-2025-59047\n","epss":0.0,"dataProcessed":"May 3, 2026, 2:12:52 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}