CVE-2023-53160
Low
Published: 28 July 2025
Published
28 July 2025
Modified
06 August 2025
KEV Added
—
Patch
—
CVSS Score v3.1
2.9
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS Score
0.0028
51.5th percentile
Risk Priority
6
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2023-53160 is a low-severity Out-of-bounds Read (CWE-125) vulnerability in Sequoia-Pgp Sequoia-Openpgp. Its CVSS base score is 2.9 (Low).
Operationally, exploitation aligns with the MITRE ATT&CK technique Application or System Exploitation (T1499.004); ranked in the top 48.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-59770
Vulnerability details
The sequoia-openpgp crate before 1.16.0 for Rust allows out-of-bounds array access and a panic.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
T1499.004 Application or System Exploitation Impact
Adversaries may exploit software vulnerabilities that can cause an application or system to crash and deny availability to users.
Why these techniques?
Out-of-bounds array access from attacker-controlled input causes application panic, enabling endpoint denial-of-service through application exploitation.
Affected Assets
sequoia-pgp
sequoia-openpgp
≤ 1.1.1 · 1.2.0 — 1.8.1 · 1.9.0 — 1.16.0
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.