Cyber Resilience

CVE-2023-53161

Low

Published: 28 July 2025

Published
28 July 2025
Modified
06 August 2025
KEV Added
Patch
CVSS Score v3.1 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS Score 0.0026 49.6th percentile
Risk Priority 6 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2023-53161 is a low-severity Out-of-bounds Read (CWE-125) vulnerability in Sequoia-Pgp Buffered-Reader. Its CVSS base score is 2.9 (Low).

Operationally, exploitation aligns with the MITRE ATT&CK technique Application or System Exploitation (T1499.004); ranked at the 49.6th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

The buffered-reader crate before 1.1.5 for Rust allows out-of-bounds array access and a panic.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1499.004 Application or System Exploitation Impact
Adversaries may exploit software vulnerabilities that can cause an application or system to crash and deny availability to users.
Why these techniques?

The vulnerability allows out-of-bounds array access from attacker-controlled input, causing application panic and denial-of-service via application exploitation.

MITRE ATLAS TechniquesAI

MITRE ATLAS techniques

AML.T0048: External Harms

Affected Assets

sequoia-pgp
buffered-reader
≤ 1.0.2 · 1.1.0 — 1.1.5

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References